last executing test programs: 2.990652975s ago: executing program 0 (id=7006): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x300, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) 2.990455793s ago: executing program 0 (id=7007): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff9, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x24004810) 2.94037416s ago: executing program 0 (id=7008): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e26, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.650339296s ago: executing program 3 (id=7013): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0xffc99a3b00000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x8000000000000001, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001140)=ANY=[], 0x204}, 0x1, 0x0, 0x0, 0x801}, 0x811) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.650179907s ago: executing program 1 (id=7014): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB]) read$FUSE(r0, &(0x7f0000006840)={0x2020}, 0x2020) socket(0x23, 0x1, 0x320) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0xf42, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0xffffffff}, 0x0, 0x0) 2.03532886s ago: executing program 0 (id=7015): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.720086121s ago: executing program 3 (id=7016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd9000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.708455348s ago: executing program 1 (id=7017): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@target={'target ', {'PCI:', '0', ':', '0', ':', '5', '.', '0'}}, 0x13) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.6291129s ago: executing program 3 (id=7018): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(r4, 0x6, &(0x7f0000000200)=0x1000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4008040) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 1.279927292s ago: executing program 2 (id=7019): socket$inet6(0xa, 0x800000000000002, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB='\n']) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000000580)='./file0/../file0/file0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="1c"]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(0x0, 0x400, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x1, 0xfffffdfffffffff1, 0x0, 0x9, 0xbd, {0x6, 0xfff, 0x3, 0x6, 0xe3, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x1000, 0x7fffffff, r3, 0x0, 0x40, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x80000000000000a, 0x2, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x10800, 0x0) 1.20048909s ago: executing program 2 (id=7020): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x36) capset(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) 1.12054179s ago: executing program 0 (id=7021): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) 1.12010262s ago: executing program 0 (id=7022): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100008010bd40820529009dbb0000000109022400011b00001009040000022a3e"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000002000010027bd7000fddbdf250a108080000000031600000014000200fc0200000000000000000000000000201400010020010000000000fffffffa0000000000080018004e224e24140003006c6f00"], 0x60}}, 0x40080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r11) 680.5464ms ago: executing program 3 (id=7023): socket(0x1, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) 680.345496ms ago: executing program 1 (id=7024): capset(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x23, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x80000f1, 0x37, 0xc698, 0x80000001, 0x6, 0x6, 0x1, 0x6b, 0xff, 0x2, 0x80000000, 0x2, 0x20000002, 0x0, 0x0, 0x8, 0x10000, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x4, 0x7fff, 0x4, 0x6, 0x2, 0x1, 0x80000001, 0xc0000, 0x9c, 0x4, 0x3ff, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x4, 0x5, 0x80, 0x0, 0x1, 0xc, 0x8, 0x3, 0x43, 0x7, 0x8, 0x5, 0x80000000, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x3, 0x7, 0x9, 0x8, 0x40000008, 0x4, 0x95, 0x7, 0x72, 0x0, 0x6, 0x8, 0x3, 0x7, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x1, 0x0, 0x3, 0x2, 0x2, 0x2, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x9, 0x4, 0x1ff, 0x6, 0xb, 0x8, 0x326, 0x4, 0xffff, 0x4, 0x1, 0xf202, 0xfffffffd, 0x5, 0x7, 0x0, 0x2, 0x4, 0x0, 0x87, 0x5, 0x8000, 0x1, 0xa, 0xffff, 0xa1, 0x6, 0x9]}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 680.212862ms ago: executing program 3 (id=7025): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5b, &(0x7f0000000000)=ANY=[], 0x0) 680.060266ms ago: executing program 1 (id=7026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd6a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0x9}, 0xb, 0x0, 0x80008, 0x5, 0x8, 0x2, 0x9, 0xd, 0xc, 0x1, {0xffff1c72, 0x3, 0x1000, 0x102, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008820}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 530.347269ms ago: executing program 1 (id=7027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 450.328917ms ago: executing program 1 (id=7028): pipe(&(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sysinfo(&(0x7f0000000480)=""/133) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 290.440337ms ago: executing program 2 (id=7029): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) capget(0x0, &(0x7f0000002100)) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 100.441462ms ago: executing program 2 (id=7030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x7, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x0, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x5, 0x6, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000007c0)={{0x1, 0x0, 0x80, {0x5000, 0xdddd1000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 400.996µs ago: executing program 2 (id=7031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x247, 0x0) 175.404µs ago: executing program 2 (id=7032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 0s ago: executing program 3 (id=7033): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) kernel console output (not intermixed with test programs): ? __pfx_ksys_read+0x10/0x10 [ 1988.809410][T31856] ? rcu_is_watching+0x12/0xc0 [ 1988.809423][T31856] __do_fast_syscall_32+0x7c/0x3a0 [ 1988.809439][T31856] do_fast_syscall_32+0x32/0x80 [ 1988.809453][T31856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1988.809466][T31856] RIP: 0023:0xf709e579 [ 1988.809475][T31856] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1988.809486][T31856] RSP: 002b:00000000f5454590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1988.809500][T31856] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f5454620 [ 1988.809506][T31856] RDX: 000000000000000f RSI: 00000000f7414ff4 RDI: 0000000000000000 [ 1988.809513][T31856] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1988.809518][T31856] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1988.809524][T31856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1988.809537][T31856] [ 1989.356890][T31869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6351'. [ 1989.593076][T18261] usb 5-1: USB disconnect, device number 89 [ 1990.068340][T31879] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1990.070940][T31879] team0: Device ipvlan2 is already an upper device of the team interface [ 1991.360019][T31901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6357'. [ 1991.377355][T31901] bridge3: entered promiscuous mode [ 1991.411201][T31902] FAULT_INJECTION: forcing a failure. [ 1991.411201][T31902] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.416497][T31902] CPU: 1 UID: 0 PID: 31902 Comm: syz.2.6359 Not tainted syzkaller #0 PREEMPT(full) [ 1991.416535][T31902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1991.416546][T31902] Call Trace: [ 1991.416553][T31902] [ 1991.416559][T31902] dump_stack_lvl+0x16c/0x1f0 [ 1991.416585][T31902] should_fail_ex+0x512/0x640 [ 1991.416607][T31902] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1991.416629][T31902] should_failslab+0xc2/0x120 [ 1991.416649][T31902] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1991.416668][T31902] ? sock_alloc_inode+0x25/0x1c0 [ 1991.416695][T31902] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1991.416716][T31902] sock_alloc_inode+0x25/0x1c0 [ 1991.416738][T31902] alloc_inode+0x61/0x240 [ 1991.416760][T31902] sock_alloc+0x40/0x280 [ 1991.416783][T31902] __sock_create+0xc1/0x8d0 [ 1991.416803][T31902] __sys_socket+0x14d/0x260 [ 1991.416819][T31902] ? __pfx___sys_socket+0x10/0x10 [ 1991.416833][T31902] ? ksys_write+0x1ac/0x250 [ 1991.416851][T31902] ? __pfx_ksys_write+0x10/0x10 [ 1991.416872][T31902] __ia32_sys_socket+0x72/0xb0 [ 1991.416887][T31902] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1991.416909][T31902] __do_fast_syscall_32+0x7c/0x3a0 [ 1991.416931][T31902] do_fast_syscall_32+0x32/0x80 [ 1991.416951][T31902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1991.416973][T31902] RIP: 0023:0xf70be579 [ 1991.416986][T31902] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1991.417002][T31902] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000167 [ 1991.417036][T31902] RAX: ffffffffffffffda RBX: 000000000000002b RCX: 0000000000000001 [ 1991.417046][T31902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1991.417055][T31902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1991.417065][T31902] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1991.417074][T31902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1991.417096][T31902] [ 1991.417186][T31902] socket: no more sockets [ 1991.495764][T31902] delete_channel: no stack [ 1991.881636][T26180] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1992.031691][T26180] usb 8-1: Using ep0 maxpacket: 8 [ 1992.034697][T26180] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1992.037455][T26180] usb 8-1: config 0 has no interface number 0 [ 1992.039498][T26180] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1992.085574][T26180] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1992.089258][T26180] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1992.092821][T26180] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1992.097562][T26180] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1992.101131][T26180] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.111037][T26180] usb 8-1: config 0 descriptor?? [ 1992.119483][T26180] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1992.759178][ T6060] usb 8-1: USB disconnect, device number 81 [ 1992.765015][ T6060] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1993.045081][T31922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6364'. [ 1993.066947][T31924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6365'. [ 1993.301613][T26180] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1993.455453][T26180] usb 5-1: config 9 has an invalid interface number: 170 but max is 2 [ 1993.459221][T26180] usb 5-1: config 9 has an invalid interface number: 35 but max is 2 [ 1993.462837][T26180] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.467138][T26180] usb 5-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 1993.470548][T26180] usb 5-1: config 9 has no interface number 0 [ 1993.473272][T26180] usb 5-1: config 9 has no interface number 1 [ 1993.475295][T26180] usb 5-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1993.478895][T26180] usb 5-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 1993.482291][T26180] usb 5-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1993.485713][T26180] usb 5-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1993.489145][T26180] usb 5-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1993.493046][T26180] usb 5-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1993.496575][T26180] usb 5-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1993.500742][T26180] usb 5-1: config 9 interface 170 has no altsetting 0 [ 1993.580937][T26180] usb 5-1: config 9 interface 35 has no altsetting 0 [ 1993.584853][T26180] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 1993.587707][T26180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.590172][T26180] usb 5-1: Product: Ј [ 1993.591477][T26180] usb 5-1: Manufacturer: ä°Š [ 1993.593401][T26180] usb 5-1: SerialNumber: syz [ 1993.596930][T31924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1993.830861][T31924] cgroup: noprefix used incorrectly [ 1993.943962][T26180] ftdi_sio 5-1:9.170: FTDI USB Serial Device converter detected [ 1993.950344][T26180] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 1994.174803][T26180] ftdi_sio 5-1:9.35: FTDI USB Serial Device converter detected [ 1994.178104][T26180] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 1994.188170][T26180] usb 5-1: USB disconnect, device number 90 [ 1994.208112][T26180] ftdi_sio 5-1:9.170: device disconnected [ 1994.210711][T26180] ftdi_sio 5-1:9.35: device disconnected [ 1994.417976][T31939] FAULT_INJECTION: forcing a failure. [ 1994.417976][T31939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1994.423561][T31939] CPU: 3 UID: 0 PID: 31939 Comm: syz.1.6370 Not tainted syzkaller #0 PREEMPT(full) [ 1994.423577][T31939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1994.423584][T31939] Call Trace: [ 1994.423588][T31939] [ 1994.423593][T31939] dump_stack_lvl+0x16c/0x1f0 [ 1994.423612][T31939] should_fail_ex+0x512/0x640 [ 1994.423629][T31939] _copy_from_user+0x2e/0xd0 [ 1994.423646][T31939] get_compat_msghdr+0xa7/0x170 [ 1994.423660][T31939] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1994.423678][T31939] ___sys_sendmsg+0x1ae/0x1d0 [ 1994.423701][T31939] ? __pfx____sys_sendmsg+0x10/0x10 [ 1994.423722][T31939] ? find_held_lock+0x2b/0x80 [ 1994.423741][T31939] __sys_sendmsg+0x16d/0x220 [ 1994.423755][T31939] ? __pfx___sys_sendmsg+0x10/0x10 [ 1994.423775][T31939] ? rcu_is_watching+0x12/0xc0 [ 1994.423788][T31939] __do_fast_syscall_32+0x7c/0x3a0 [ 1994.423804][T31939] do_fast_syscall_32+0x32/0x80 [ 1994.423818][T31939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1994.423831][T31939] RIP: 0023:0xf709e579 [ 1994.423840][T31939] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1994.423850][T31939] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1994.423861][T31939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1994.423867][T31939] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1994.423873][T31939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.423879][T31939] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1994.423885][T31939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.423899][T31939] [ 1995.531070][T31957] syzkaller0: entered promiscuous mode [ 1995.536005][T31957] syzkaller0: entered allmulticast mode [ 1995.683006][T31955] netlink: 'syz.1.6375': attribute type 10 has an invalid length. [ 1995.685598][T31955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6375'. [ 1995.933328][T31970] FAULT_INJECTION: forcing a failure. [ 1995.933328][T31970] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.938355][T31970] CPU: 2 UID: 0 PID: 31970 Comm: syz.0.6378 Not tainted syzkaller #0 PREEMPT(full) [ 1995.938371][T31970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1995.938378][T31970] Call Trace: [ 1995.938382][T31970] [ 1995.938387][T31970] dump_stack_lvl+0x16c/0x1f0 [ 1995.938409][T31970] should_fail_ex+0x512/0x640 [ 1995.938423][T31970] ? fs_reclaim_acquire+0xae/0x150 [ 1995.938449][T31970] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1995.938465][T31970] should_failslab+0xc2/0x120 [ 1995.938479][T31970] __kmalloc_noprof+0xd2/0x510 [ 1995.938494][T31970] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1995.938510][T31970] ? tomoyo_profile+0x47/0x60 [ 1995.938527][T31970] tomoyo_path_number_perm+0x245/0x580 [ 1995.938545][T31970] ? tomoyo_path_number_perm+0x237/0x580 [ 1995.938558][T31970] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1995.938585][T31970] ? find_held_lock+0x2b/0x80 [ 1995.938596][T31970] ? hook_file_ioctl_common+0x145/0x410 [ 1995.938613][T31970] ? __fget_files+0x20e/0x3c0 [ 1995.938627][T31970] security_file_ioctl_compat+0x9b/0x240 [ 1995.938641][T31970] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1995.938659][T31970] __do_fast_syscall_32+0x7c/0x3a0 [ 1995.938675][T31970] do_fast_syscall_32+0x32/0x80 [ 1995.938689][T31970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1995.938702][T31970] RIP: 0023:0xf70de579 [ 1995.938711][T31970] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.938721][T31970] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1995.938743][T31970] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005412 [ 1995.938751][T31970] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1995.938757][T31970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.938763][T31970] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1995.938789][T31970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.938803][T31970] [ 1995.938822][T31970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1996.599464][T31980] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1996.601533][T31980] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1996.604461][T31980] vhci_hcd vhci_hcd.0: Device attached [ 1996.787995][T31983] vhci_hcd: connection closed [ 1996.791695][T24549] vhci_hcd: stop threads [ 1996.801699][T24549] vhci_hcd: release socket [ 1996.811745][T24549] vhci_hcd: disconnect device [ 1996.923582][T31989] FAULT_INJECTION: forcing a failure. [ 1996.923582][T31989] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.927955][T31989] CPU: 3 UID: 0 PID: 31989 Comm: syz.2.6382 Not tainted syzkaller #0 PREEMPT(full) [ 1996.927978][T31989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1996.927989][T31989] Call Trace: [ 1996.927995][T31989] [ 1996.928003][T31989] dump_stack_lvl+0x16c/0x1f0 [ 1996.928028][T31989] should_fail_ex+0x512/0x640 [ 1996.928043][T31989] ? fs_reclaim_acquire+0xae/0x150 [ 1996.928060][T31989] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1996.928075][T31989] should_failslab+0xc2/0x120 [ 1996.928089][T31989] __kmalloc_noprof+0xd2/0x510 [ 1996.928104][T31989] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1996.928120][T31989] ? tomoyo_profile+0x47/0x60 [ 1996.928131][T31989] tomoyo_path_number_perm+0x245/0x580 [ 1996.928143][T31989] ? tomoyo_path_number_perm+0x237/0x580 [ 1996.928156][T31989] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1996.928183][T31989] ? find_held_lock+0x2b/0x80 [ 1996.928194][T31989] ? hook_file_ioctl_common+0x145/0x410 [ 1996.928211][T31989] ? __fget_files+0x20e/0x3c0 [ 1996.928226][T31989] security_file_ioctl_compat+0x9b/0x240 [ 1996.928242][T31989] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1996.928259][T31989] __do_fast_syscall_32+0x7c/0x3a0 [ 1996.928275][T31989] do_fast_syscall_32+0x32/0x80 [ 1996.928289][T31989] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1996.928302][T31989] RIP: 0023:0xf70be579 [ 1996.928311][T31989] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.928321][T31989] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1996.928332][T31989] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008108551b [ 1996.928339][T31989] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1996.928345][T31989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.928351][T31989] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1996.928357][T31989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.928370][T31989] [ 1996.928374][T31989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1997.475782][T31955] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1997.642473][T32005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6387'. [ 1997.751092][T32009] netlink: 'syz.0.6385': attribute type 12 has an invalid length. [ 1997.849913][T32010] random: crng reseeded on system resumption [ 1998.173808][T32013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6388'. [ 1999.289564][T32021] FAULT_INJECTION: forcing a failure. [ 1999.289564][T32021] name failslab, interval 1, probability 0, space 0, times 0 [ 1999.296263][T32021] CPU: 2 UID: 0 PID: 32021 Comm: syz.0.6391 Not tainted syzkaller #0 PREEMPT(full) [ 1999.296278][T32021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1999.296285][T32021] Call Trace: [ 1999.296289][T32021] [ 1999.296294][T32021] dump_stack_lvl+0x16c/0x1f0 [ 1999.296313][T32021] should_fail_ex+0x512/0x640 [ 1999.296331][T32021] ? fs_reclaim_acquire+0xae/0x150 [ 1999.296356][T32021] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1999.296380][T32021] should_failslab+0xc2/0x120 [ 1999.296404][T32021] __kmalloc_noprof+0xd2/0x510 [ 1999.296425][T32021] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1999.296450][T32021] ? tomoyo_profile+0x47/0x60 [ 1999.296467][T32021] tomoyo_path_number_perm+0x245/0x580 [ 1999.296480][T32021] ? tomoyo_path_number_perm+0x237/0x580 [ 1999.296494][T32021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1999.296520][T32021] ? find_held_lock+0x2b/0x80 [ 1999.296530][T32021] ? hook_file_ioctl_common+0x145/0x410 [ 1999.296547][T32021] ? __fget_files+0x20e/0x3c0 [ 1999.296561][T32021] security_file_ioctl_compat+0x9b/0x240 [ 1999.296576][T32021] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1999.296594][T32021] __do_fast_syscall_32+0x7c/0x3a0 [ 1999.296609][T32021] do_fast_syscall_32+0x32/0x80 [ 1999.296623][T32021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1999.296637][T32021] RIP: 0023:0xf70de579 [ 1999.296646][T32021] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1999.296656][T32021] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1999.296666][T32021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005412 [ 1999.296673][T32021] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1999.296679][T32021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1999.296685][T32021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1999.296691][T32021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1999.296704][T32021] [ 1999.296709][T32021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1999.761606][ T6092] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1999.800839][T32031] netlink: 'syz.1.6392': attribute type 10 has an invalid length. [ 1999.803474][T32031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6392'. [ 1999.806360][T32031] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1999.911639][ T6092] usb 5-1: Using ep0 maxpacket: 8 [ 1999.929412][ T6092] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1999.934415][ T6092] usb 5-1: config 0 has no interface number 0 [ 1999.936556][ T6092] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1999.940172][ T6092] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1999.944125][ T6092] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1999.947680][ T6092] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1999.956080][ T6092] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1999.964952][ T6092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.035334][ T6092] usb 5-1: config 0 descriptor?? [ 2000.040777][ T6092] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2000.059931][T32034] nbd: couldn't find device at index 22016 [ 2000.063592][T32035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6394'. [ 2000.785636][T29031] usb 5-1: USB disconnect, device number 91 [ 2000.794689][T29031] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2000.966632][T32077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6402'. [ 2001.337531][T32081] FAULT_INJECTION: forcing a failure. [ 2001.337531][T32081] name failslab, interval 1, probability 0, space 0, times 0 [ 2001.361595][T32081] CPU: 2 UID: 0 PID: 32081 Comm: syz.0.6404 Not tainted syzkaller #0 PREEMPT(full) [ 2001.361613][T32081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2001.361620][T32081] Call Trace: [ 2001.361624][T32081] [ 2001.361628][T32081] dump_stack_lvl+0x16c/0x1f0 [ 2001.361653][T32081] should_fail_ex+0x512/0x640 [ 2001.361691][T32081] ? fs_reclaim_acquire+0xae/0x150 [ 2001.361710][T32081] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2001.361729][T32081] should_failslab+0xc2/0x120 [ 2001.361750][T32081] __kmalloc_noprof+0xd2/0x510 [ 2001.361774][T32081] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2001.361799][T32081] ? tomoyo_profile+0x47/0x60 [ 2001.361814][T32081] tomoyo_path_number_perm+0x245/0x580 [ 2001.361829][T32081] ? tomoyo_path_number_perm+0x237/0x580 [ 2001.361850][T32081] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2001.361893][T32081] ? find_held_lock+0x2b/0x80 [ 2001.361908][T32081] ? hook_file_ioctl_common+0x145/0x410 [ 2001.361930][T32081] ? __fget_files+0x20e/0x3c0 [ 2001.361952][T32081] security_file_ioctl_compat+0x9b/0x240 [ 2001.361974][T32081] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2001.362002][T32081] __do_fast_syscall_32+0x7c/0x3a0 [ 2001.362025][T32081] do_fast_syscall_32+0x32/0x80 [ 2001.362042][T32081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2001.362061][T32081] RIP: 0023:0xf70de579 [ 2001.362074][T32081] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2001.362088][T32081] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2001.362103][T32081] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005521 [ 2001.362113][T32081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2001.362122][T32081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2001.362130][T32081] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2001.362137][T32081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2001.362159][T32081] [ 2001.368730][T32081] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2002.655687][T32099] FAULT_INJECTION: forcing a failure. [ 2002.655687][T32099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2002.661665][T32099] CPU: 1 UID: 0 PID: 32099 Comm: syz.3.6409 Not tainted syzkaller #0 PREEMPT(full) [ 2002.661681][T32099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2002.661688][T32099] Call Trace: [ 2002.661692][T32099] [ 2002.661697][T32099] dump_stack_lvl+0x16c/0x1f0 [ 2002.661714][T32099] should_fail_ex+0x512/0x640 [ 2002.661732][T32099] _copy_from_user+0x2e/0xd0 [ 2002.661748][T32099] get_compat_msghdr+0xa7/0x170 [ 2002.661763][T32099] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2002.661780][T32099] ___sys_sendmsg+0x1ae/0x1d0 [ 2002.661796][T32099] ? __pfx____sys_sendmsg+0x10/0x10 [ 2002.661815][T32099] ? find_held_lock+0x2b/0x80 [ 2002.661835][T32099] __sys_sendmsg+0x16d/0x220 [ 2002.661849][T32099] ? __pfx___sys_sendmsg+0x10/0x10 [ 2002.661868][T32099] ? rcu_is_watching+0x12/0xc0 [ 2002.661881][T32099] __do_fast_syscall_32+0x7c/0x3a0 [ 2002.661896][T32099] do_fast_syscall_32+0x32/0x80 [ 2002.661910][T32099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2002.661923][T32099] RIP: 0023:0xf7f51579 [ 2002.661932][T32099] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2002.661942][T32099] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2002.661952][T32099] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540 [ 2002.661959][T32099] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2002.661965][T32099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2002.661970][T32099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2002.661976][T32099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2002.661989][T32099] [ 2003.633080][T32119] FAULT_INJECTION: forcing a failure. [ 2003.633080][T32119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2003.636952][T32119] CPU: 0 UID: 0 PID: 32119 Comm: syz.1.6414 Not tainted syzkaller #0 PREEMPT(full) [ 2003.636975][T32119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2003.636987][T32119] Call Trace: [ 2003.636994][T32119] [ 2003.637001][T32119] dump_stack_lvl+0x16c/0x1f0 [ 2003.637027][T32119] should_fail_ex+0x512/0x640 [ 2003.637055][T32119] _copy_from_user+0x2e/0xd0 [ 2003.637072][T32119] __ia32_compat_sys_socketcall+0x187/0x770 [ 2003.637088][T32119] ? __fget_files+0x20e/0x3c0 [ 2003.637100][T32119] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 2003.637116][T32119] ? fput+0x9b/0xd0 [ 2003.637130][T32119] ? ksys_write+0x1ac/0x250 [ 2003.637141][T32119] ? __pfx_ksys_write+0x10/0x10 [ 2003.637154][T32119] ? rcu_is_watching+0x12/0xc0 [ 2003.637168][T32119] __do_fast_syscall_32+0x7c/0x3a0 [ 2003.637184][T32119] do_fast_syscall_32+0x32/0x80 [ 2003.637198][T32119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2003.637211][T32119] RIP: 0023:0xf709e579 [ 2003.637220][T32119] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2003.637231][T32119] RSP: 002b:00000000f548d430 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 2003.637241][T32119] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f548d444 [ 2003.637248][T32119] RDX: 0000000000000000 RSI: 00000000f548d560 RDI: 00000000f7414ff4 [ 2003.637253][T32119] RBP: 00000000f548d560 R08: 0000000000000000 R09: 0000000000000000 [ 2003.637260][T32119] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2003.637266][T32119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2003.637278][T32119] [ 2003.691665][T19050] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2003.802798][T32123] netlink: 'syz.2.6416': attribute type 11 has an invalid length. [ 2003.805283][T32123] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6416'. [ 2003.812453][T32123] netlink: 'syz.2.6416': attribute type 10 has an invalid length. [ 2003.815888][T32123] bond0: (slave wlan1): Opening slave failed [ 2003.819672][T32123] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 2003.871944][T19050] usb 5-1: Using ep0 maxpacket: 8 [ 2003.874980][T19050] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2003.878079][T19050] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2003.881357][T19050] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2003.884692][T19050] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2003.888973][T19050] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2003.893302][T19050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.127161][T19050] usb 5-1: usb_control_msg returned -32 [ 2004.129322][T19050] usbtmc 5-1:16.0: can't read capabilities [ 2004.149507][T19050] usb 5-1: USB disconnect, device number 92 [ 2004.613231][T32142] FAULT_INJECTION: forcing a failure. [ 2004.613231][T32142] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.617003][T32142] CPU: 1 UID: 0 PID: 32142 Comm: syz.3.6421 Not tainted syzkaller #0 PREEMPT(full) [ 2004.617018][T32142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2004.617024][T32142] Call Trace: [ 2004.617029][T32142] [ 2004.617033][T32142] dump_stack_lvl+0x16c/0x1f0 [ 2004.617051][T32142] should_fail_ex+0x512/0x640 [ 2004.617065][T32142] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2004.617080][T32142] should_failslab+0xc2/0x120 [ 2004.617100][T32142] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2004.617112][T32142] ? __alloc_skb+0x2b2/0x380 [ 2004.617128][T32142] __alloc_skb+0x2b2/0x380 [ 2004.617140][T32142] ? __pfx___alloc_skb+0x10/0x10 [ 2004.617154][T32142] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2004.617171][T32142] netlink_alloc_large_skb+0x69/0x130 [ 2004.617186][T32142] netlink_sendmsg+0x6a1/0xdd0 [ 2004.617202][T32142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2004.617218][T32142] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2004.617232][T32142] sock_write_iter+0x4ff/0x5b0 [ 2004.617242][T32142] ? __pfx_sock_write_iter+0x10/0x10 [ 2004.617258][T32142] ? __lock_acquire+0x62e/0x1ce0 [ 2004.617274][T32142] do_iter_readv_writev+0x662/0x9e0 [ 2004.617287][T32142] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2004.617301][T32142] ? bpf_lsm_file_permission+0x9/0x10 [ 2004.617316][T32142] ? security_file_permission+0x71/0x210 [ 2004.617330][T32142] ? rw_verify_area+0xcf/0x6c0 [ 2004.617342][T32142] vfs_writev+0x35f/0xde0 [ 2004.617357][T32142] ? __pfx_vfs_writev+0x10/0x10 [ 2004.617368][T32142] ? find_held_lock+0x2b/0x80 [ 2004.617386][T32142] ? __fget_files+0x20e/0x3c0 [ 2004.617396][T32142] ? __fget_files+0x200/0x3c0 [ 2004.617410][T32142] ? do_writev+0x28c/0x340 [ 2004.617420][T32142] do_writev+0x28c/0x340 [ 2004.617431][T32142] ? __pfx_do_writev+0x10/0x10 [ 2004.617443][T32142] ? rcu_is_watching+0x12/0xc0 [ 2004.617456][T32142] __do_fast_syscall_32+0x7c/0x3a0 [ 2004.617471][T32142] do_fast_syscall_32+0x32/0x80 [ 2004.617485][T32142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2004.617498][T32142] RIP: 0023:0xf7f51579 [ 2004.617507][T32142] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2004.617518][T32142] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 2004.617528][T32142] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000040 [ 2004.617535][T32142] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2004.617541][T32142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2004.617547][T32142] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2004.617553][T32142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2004.617565][T32142] [ 2004.803495][T32150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6424'. [ 2004.829458][T32146] [ 2004.964318][T32155] netlink: 'syz.0.6425': attribute type 10 has an invalid length. [ 2004.967630][T32155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6425'. [ 2004.970555][T32155] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2006.095734][T32169] fuse: Bad value for 'user_id' [ 2006.097468][T32169] fuse: Bad value for 'user_id' [ 2006.981620][ T6057] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 2007.371624][ T6057] usb 8-1: Using ep0 maxpacket: 8 [ 2007.374396][ T6057] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2007.377332][ T6057] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2007.380370][ T6057] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2007.383727][ T6057] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2007.387761][ T6057] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2007.390872][ T6057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.532037][T32174] Set syz1 is full, maxelem 65536 reached [ 2007.600972][ T6057] usb 8-1: usb_control_msg returned -32 [ 2007.603202][ T6057] usbtmc 8-1:16.0: can't read capabilities [ 2007.955810][T32207] usbtmc 8-1:16.0: INDICATOR_PULSE returned 0 [ 2008.161921][T19050] usb 8-1: USB disconnect, device number 82 [ 2008.684319][T32206] syz.2.6437 (32206) used greatest stack depth: 19320 bytes left [ 2008.773105][T32220] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2008.775840][T32220] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2008.779353][T32220] vhci_hcd vhci_hcd.0: Device attached [ 2008.897983][T32228] netlink: 'syz.2.6440': attribute type 10 has an invalid length. [ 2008.901677][T32228] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6440'. [ 2008.906113][T32228] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2009.013603][T32229] fuse: Bad value for 'user_id' [ 2009.015254][T32229] fuse: Bad value for 'user_id' [ 2009.115086][T31402] usb 44-1: SetAddress Request (2) to port 0 [ 2009.117429][T31402] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2009.442401][T32236] kvm: Disabled LAPIC found during irq injection [ 2009.526356][T32221] vhci_hcd: connection reset by peer [ 2009.529091][T19403] vhci_hcd: stop threads [ 2009.530788][T19403] vhci_hcd: release socket [ 2009.534297][T19403] vhci_hcd: disconnect device [ 2009.881678][ T6057] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2010.051729][ T6057] usb 5-1: Using ep0 maxpacket: 8 [ 2010.056761][ T6057] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 2010.060004][ T6057] usb 5-1: config 0 has no interface number 0 [ 2010.062471][ T6057] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2010.065797][ T6057] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2010.069562][ T6057] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2010.074104][ T6057] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2010.078103][ T6057] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2010.081038][ T6057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.085090][ T6057] usb 5-1: config 0 descriptor?? [ 2010.089587][ T6057] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2010.208666][T32256] netlink: 'syz.3.6450': attribute type 10 has an invalid length. [ 2010.212210][T32256] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6450'. [ 2010.216235][T32256] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2010.715291][T32263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6452'. [ 2010.718111][T32263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6452'. [ 2011.065223][T32282] fuse: Bad value for 'user_id' [ 2011.066964][T32282] fuse: Bad value for 'user_id' [ 2011.091689][T31396] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2011.271673][T31396] usb 6-1: device descriptor read/64, error -71 [ 2011.511679][T31396] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2011.641671][T31396] usb 6-1: device descriptor read/64, error -71 [ 2011.763578][T31396] usb usb6-port1: attempt power cycle [ 2011.906197][T24477] Bluetooth: hci1: unexpected event for opcode 0x2064 [ 2011.978428][T24477] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 2012.102034][T31396] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2012.123262][T32294] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2012.126395][T32294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2012.131600][T32294] vhci_hcd vhci_hcd.0: Device attached [ 2012.131623][T31396] usb 6-1: device descriptor read/8, error -71 [ 2012.203630][T32299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6459'. [ 2012.206682][T32299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6459'. [ 2012.230116][T32299] vxlan0: entered promiscuous mode [ 2012.244658][T26679] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2012.247390][T26679] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2012.250061][T26679] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2012.260276][T26679] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2012.371642][T31396] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2012.381640][ T6092] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2012.391993][T31396] usb 6-1: device descriptor read/8, error -71 [ 2012.502543][T31396] usb usb6-port1: unable to enumerate USB device [ 2012.533594][ T6092] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2012.537997][ T6092] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2012.541690][ T6092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.546972][ T6092] usb 7-1: config 0 descriptor?? [ 2012.627854][ T6060] usb 5-1: USB disconnect, device number 93 [ 2012.632111][ T6060] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2012.646955][T32295] vhci_hcd: connection closed [ 2012.647200][ T13] vhci_hcd: stop threads [ 2012.650284][ T13] vhci_hcd: release socket [ 2012.652050][ T13] vhci_hcd: disconnect device [ 2012.752871][ T6092] usbhid 7-1:0.0: can't add hid device: -71 [ 2012.754795][ T6092] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2012.758149][ T6092] usb 7-1: USB disconnect, device number 63 [ 2013.191818][ T6092] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2013.276415][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.279987][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.283287][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.287157][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.290269][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.293612][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.296971][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.300344][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.304508][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.308287][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.311606][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.314848][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.318503][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.322322][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.326150][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.330157][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.333626][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.336514][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.339356][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.342304][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.345224][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.348937][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.351735][ T6092] usb 7-1: Using ep0 maxpacket: 32 [ 2013.351916][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.356885][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.358254][ T6092] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2013.359773][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.366191][ T6092] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2013.366563][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.370198][ T6092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.373184][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.377832][ T6092] usb 7-1: config 0 descriptor?? [ 2013.380423][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.382476][ T6092] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2013.383454][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.388586][ T6092] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2013.390345][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.395381][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.399901][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.404159][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.408087][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.411855][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.415014][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.418145][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.421119][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.424219][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.427317][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.430555][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.433753][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.437222][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.440022][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.443472][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.446769][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.449631][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.452530][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.455795][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.459329][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.462289][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.465352][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.468299][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.471096][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.474075][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.477330][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.480276][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.483211][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.486410][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.490092][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.494248][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.497460][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.500409][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.503434][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.506632][T32315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6466' sets config #-1 [ 2013.754153][T32322] fuse: Bad value for 'user_id' [ 2013.755812][T32322] fuse: Bad value for 'user_id' [ 2013.788253][T32298] FAULT_INJECTION: forcing a failure. [ 2013.788253][T32298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2013.796001][T32298] CPU: 1 UID: 0 PID: 32298 Comm: syz.2.6461 Not tainted syzkaller #0 PREEMPT(full) [ 2013.796029][T32298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2013.796037][T32298] Call Trace: [ 2013.796042][T32298] [ 2013.796047][T32298] dump_stack_lvl+0x16c/0x1f0 [ 2013.796081][T32298] should_fail_ex+0x512/0x640 [ 2013.796099][T32298] _copy_to_user+0x32/0xd0 [ 2013.796111][T32298] ld_usb_read+0x618/0x900 [ 2013.796128][T32298] ? __pfx_ld_usb_read+0x10/0x10 [ 2013.796142][T32298] ? common_file_perm+0x1a9/0x340 [ 2013.796157][T32298] ? bpf_lsm_file_permission+0x9/0x10 [ 2013.796173][T32298] ? security_file_permission+0x71/0x210 [ 2013.796189][T32298] ? rw_verify_area+0xcf/0x6c0 [ 2013.796202][T32298] ? __pfx_ld_usb_read+0x10/0x10 [ 2013.796214][T32298] vfs_readv+0x5be/0x8b0 [ 2013.796229][T32298] ? __pfx_vfs_readv+0x10/0x10 [ 2013.796240][T32298] ? trace_sched_exit_tp+0xd1/0x120 [ 2013.796257][T32298] ? __schedule+0x11a3/0x5de0 [ 2013.796280][T32298] ? __fget_files+0x20e/0x3c0 [ 2013.796296][T32298] ? do_readv+0x28c/0x340 [ 2013.796306][T32298] do_readv+0x28c/0x340 [ 2013.796318][T32298] ? __pfx_do_readv+0x10/0x10 [ 2013.796331][T32298] ? rcu_is_watching+0x12/0xc0 [ 2013.796345][T32298] __do_fast_syscall_32+0x7c/0x3a0 [ 2013.796361][T32298] do_fast_syscall_32+0x32/0x80 [ 2013.796376][T32298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2013.796391][T32298] RIP: 0023:0xf70be579 [ 2013.796401][T32298] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2013.796412][T32298] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 2013.796423][T32298] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 2013.796430][T32298] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2013.796437][T32298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2013.796443][T32298] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2013.796449][T32298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2013.796464][T32298] [ 2013.799812][T29031] usb 7-1: USB disconnect, device number 64 [ 2013.881952][T29031] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 2013.980747][T32330] FAULT_INJECTION: forcing a failure. [ 2013.980747][T32330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2013.986104][T32330] CPU: 1 UID: 0 PID: 32330 Comm: syz.1.6469 Not tainted syzkaller #0 PREEMPT(full) [ 2013.986120][T32330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2013.986127][T32330] Call Trace: [ 2013.986131][T32330] [ 2013.986136][T32330] dump_stack_lvl+0x16c/0x1f0 [ 2013.986154][T32330] should_fail_ex+0x512/0x640 [ 2013.986171][T32330] _copy_from_user+0x2e/0xd0 [ 2013.986188][T32330] do_sys_poll+0x1d5/0xdf0 [ 2013.986200][T32330] ? __lock_acquire+0x62e/0x1ce0 [ 2013.986217][T32330] ? __pfx_do_sys_poll+0x10/0x10 [ 2013.986228][T32330] ? __lock_acquire+0x62e/0x1ce0 [ 2013.986279][T32330] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2013.986296][T32330] ? set_compat_user_sigmask+0x213/0x2a0 [ 2013.986308][T32330] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 2013.986320][T32330] ? __fget_files+0x20e/0x3c0 [ 2013.986330][T32330] ? handle_mm_fault+0x1c0/0xd10 [ 2013.986343][T32330] __ia32_compat_sys_ppoll_time32+0x248/0x2c0 [ 2013.986357][T32330] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 2013.986380][T32330] ? ksys_write+0x1ac/0x250 [ 2013.986394][T32330] ? __pfx_ksys_write+0x10/0x10 [ 2013.986407][T32330] ? rcu_is_watching+0x12/0xc0 [ 2013.986420][T32330] __do_fast_syscall_32+0x7c/0x3a0 [ 2013.986435][T32330] do_fast_syscall_32+0x32/0x80 [ 2013.986449][T32330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2013.986462][T32330] RIP: 0023:0xf709e579 [ 2013.986471][T32330] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2013.986482][T32330] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 2013.986492][T32330] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000001 [ 2013.986498][T32330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2013.986504][T32330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2013.986510][T32330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2013.986516][T32330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2013.986530][T32330] [ 2014.181804][T31402] usb 44-1: device descriptor read/8, error -110 [ 2014.331660][T26180] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2014.440672][T32341] fuse: Bad value for 'group_id' [ 2014.443577][T32341] fuse: Bad value for 'group_id' [ 2014.482371][T32343] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.6474'. [ 2014.485655][T32343] tc_dump_action: action bad kind [ 2014.501622][T26180] usb 6-1: Using ep0 maxpacket: 8 [ 2014.558286][T32349] FAULT_INJECTION: forcing a failure. [ 2014.558286][T32349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2014.563591][T32349] CPU: 3 UID: 0 PID: 32349 Comm: syz.3.6477 Not tainted syzkaller #0 PREEMPT(full) [ 2014.563606][T32349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2014.563613][T32349] Call Trace: [ 2014.563617][T32349] [ 2014.563621][T32349] dump_stack_lvl+0x16c/0x1f0 [ 2014.563638][T32349] should_fail_ex+0x512/0x640 [ 2014.563656][T32349] _copy_from_user+0x2e/0xd0 [ 2014.563673][T32349] __sys_bpf+0x21d/0x4de0 [ 2014.563691][T32349] ? __pfx___sys_bpf+0x10/0x10 [ 2014.563706][T32349] ? ksys_write+0x190/0x250 [ 2014.563720][T32349] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2014.563743][T32349] ? fput+0x9b/0xd0 [ 2014.563757][T32349] ? ksys_write+0x1ac/0x250 [ 2014.563768][T32349] ? __pfx_ksys_write+0x10/0x10 [ 2014.563783][T32349] __ia32_sys_bpf+0x76/0xe0 [ 2014.563799][T32349] __do_fast_syscall_32+0x7c/0x3a0 [ 2014.563815][T32349] do_fast_syscall_32+0x32/0x80 [ 2014.563829][T32349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2014.563842][T32349] RIP: 0023:0xf7f51579 [ 2014.563850][T32349] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2014.563861][T32349] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2014.563871][T32349] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 2014.563878][T32349] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 2014.563884][T32349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2014.563890][T32349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2014.563896][T32349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2014.563909][T32349] [ 2014.616193][T31402] usb usb44-port1: attempt power cycle [ 2014.621608][T26180] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2014.628501][T26180] usb 6-1: config 0 has no interface number 0 [ 2014.630580][T26180] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2014.639748][T26180] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2014.644175][T26180] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2014.648103][T26180] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2014.652245][T26180] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2014.655462][T26180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.659567][T26180] usb 6-1: config 0 descriptor?? [ 2014.671367][T26180] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2014.817506][T32362] fuse: Bad value for 'user_id' [ 2014.819133][T32362] fuse: Bad value for 'user_id' [ 2015.382488][T31402] usb usb44-port1: unable to enumerate USB device [ 2015.414268][T32367] overlayfs: failed to resolve './file2': -2 [ 2015.474389][T32370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6481'. [ 2015.801208][T32373] netlink: 'syz.3.6482': attribute type 10 has an invalid length. [ 2015.804942][T32373] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6482'. [ 2015.808382][T32373] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2016.731692][T32356] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2017.095689][ T6057] usb 6-1: USB disconnect, device number 83 [ 2017.106732][ T6057] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2017.143976][T32394] sg_write: process 1827 (syz.1.6486) changed security contexts after opening file descriptor, this is not allowed. [ 2017.596812][T32414] lo: entered allmulticast mode [ 2017.604471][T32414] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6492'. [ 2018.047022][T32426] FAULT_INJECTION: forcing a failure. [ 2018.047022][T32426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2018.051504][T32426] CPU: 1 UID: 60929 PID: 32426 Comm: syz.1.6496 Not tainted syzkaller #0 PREEMPT(full) [ 2018.051549][T32426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2018.051561][T32426] Call Trace: [ 2018.051566][T32426] [ 2018.051573][T32426] dump_stack_lvl+0x16c/0x1f0 [ 2018.051599][T32426] should_fail_ex+0x512/0x640 [ 2018.051630][T32426] _copy_from_user+0x2e/0xd0 [ 2018.051656][T32426] get_compat_msghdr+0xa7/0x170 [ 2018.051678][T32426] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2018.051696][T32426] ? __lock_acquire+0xb97/0x1ce0 [ 2018.051728][T32426] ___sys_sendmsg+0x1ae/0x1d0 [ 2018.051752][T32426] ? __pfx____sys_sendmsg+0x10/0x10 [ 2018.051786][T32426] ? find_held_lock+0x2b/0x80 [ 2018.051820][T32426] __sys_sendmsg+0x16d/0x220 [ 2018.051842][T32426] ? __pfx___sys_sendmsg+0x10/0x10 [ 2018.051876][T32426] ? rcu_is_watching+0x12/0xc0 [ 2018.051897][T32426] __do_fast_syscall_32+0x7c/0x3a0 [ 2018.051923][T32426] do_fast_syscall_32+0x32/0x80 [ 2018.051945][T32426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2018.051965][T32426] RIP: 0023:0xf709e579 [ 2018.051977][T32426] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2018.051994][T32426] RSP: 002b:00000000f544c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2018.052013][T32426] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000140 [ 2018.052023][T32426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2018.052031][T32426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2018.052041][T32426] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2018.052050][T32426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2018.052071][T32426] [ 2018.702600][T32436] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2018.704719][T32436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2018.708058][T32436] vhci_hcd vhci_hcd.0: Device attached [ 2018.723200][T32436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6495'. [ 2019.154307][T29031] usb 44-1: SetAddress Request (6) to port 0 [ 2019.158885][T29031] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 2019.207993][T32436] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2019.216889][T32437] vhci_hcd: connection reset by peer [ 2019.243479][T19403] vhci_hcd: stop threads [ 2019.244879][T19403] vhci_hcd: release socket [ 2019.246357][T19403] vhci_hcd: disconnect device [ 2019.701695][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.707040][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.711813][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.716308][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.721202][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.737238][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.742206][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.747246][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.752220][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.757150][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.761319][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.764994][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.768605][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.772152][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.775706][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.779136][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.782643][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.785958][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.791577][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.795065][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.798503][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.802212][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.805723][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.809174][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.812689][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.816118][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.819582][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.823214][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.826855][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.830389][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.833982][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.837455][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.840920][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.844505][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2019.848073][T32450] 9pnet_fd: p9_fd_create_tcp (32450): problem connecting socket to 127.0.0.1 [ 2022.037944][T32496] 9pnet: Unknown protocol version 9 [ 2022.322008][ T6057] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2022.671619][ T6057] usb 6-1: Using ep0 maxpacket: 8 [ 2022.675627][ T6057] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2022.679260][ T6057] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2022.684323][ T6057] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2022.687414][ T6057] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2022.691412][ T6057] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2022.694305][ T6057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.906958][ T6057] usb 6-1: GET_CAPABILITIES returned 0 [ 2022.908751][ T6057] usbtmc 6-1:16.0: can't read capabilities [ 2023.108942][ T9185] usb 6-1: USB disconnect, device number 84 [ 2023.517927][T32508] binder: 32507:32508 ioctl c0306201 80000380 returned -14 [ 2023.606816][T32510] 9pnet: Unknown protocol version 9 [ 2023.611257][T32510] FAULT_INJECTION: forcing a failure. [ 2023.611257][T32510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2023.615797][T32510] CPU: 1 UID: 60929 PID: 32510 Comm: syz.0.6515 Not tainted syzkaller #0 PREEMPT(full) [ 2023.615831][T32510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2023.615840][T32510] Call Trace: [ 2023.615844][T32510] [ 2023.615850][T32510] dump_stack_lvl+0x16c/0x1f0 [ 2023.615876][T32510] should_fail_ex+0x512/0x640 [ 2023.615906][T32510] _copy_from_user+0x2e/0xd0 [ 2023.615928][T32510] get_compat_msghdr+0xa7/0x170 [ 2023.615948][T32510] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2023.615966][T32510] ? __lock_acquire+0xb97/0x1ce0 [ 2023.615992][T32510] ? kvm_sched_clock_read+0x11/0x20 [ 2023.616010][T32510] ___sys_sendmsg+0x1ae/0x1d0 [ 2023.616031][T32510] ? __pfx____sys_sendmsg+0x10/0x10 [ 2023.616063][T32510] ? find_held_lock+0x2b/0x80 [ 2023.616091][T32510] __sys_sendmsg+0x16d/0x220 [ 2023.616109][T32510] ? __pfx___sys_sendmsg+0x10/0x10 [ 2023.616141][T32510] ? rcu_is_watching+0x12/0xc0 [ 2023.616160][T32510] __do_fast_syscall_32+0x7c/0x3a0 [ 2023.616179][T32510] do_fast_syscall_32+0x32/0x80 [ 2023.616199][T32510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2023.616219][T32510] RIP: 0023:0xf70de579 [ 2023.616231][T32510] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2023.616247][T32510] RSP: 002b:00000000f548c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2023.616259][T32510] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000140 [ 2023.616267][T32510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2023.616276][T32510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2023.616285][T32510] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2023.616293][T32510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2023.616314][T32510] [ 2024.475024][T32509] block nbd3: Attempted send on invalid socket [ 2024.477146][T32509] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2024.480553][T32509] vxfs: unable to read disk superblock at 1 [ 2024.482622][T32509] block nbd3: Attempted send on invalid socket [ 2024.484395][T32509] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2024.487040][T32509] vxfs: unable to read disk superblock at 8 [ 2024.489075][T32509] vxfs: can't find superblock. [ 2024.583625][T32516] 9pnet: Unknown protocol version 9 [ 2024.629332][T29031] usb 44-1: device descriptor read/8, error -110 [ 2025.054540][T29031] usb usb44-port1: attempt power cycle [ 2025.617210][T29031] usb usb44-port1: unable to enumerate USB device [ 2026.557621][T32538] netlink: 'syz.3.6524': attribute type 10 has an invalid length. [ 2026.567343][T32538] netlink: 'syz.3.6524': attribute type 10 has an invalid length. [ 2026.578246][T32538] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2026.591218][T32538] fuse: Unknown parameter '00000000000000000000010' [ 2027.146248][T32554] netlink: 'syz.0.6528': attribute type 10 has an invalid length. [ 2027.149627][T32554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6528'. [ 2027.153659][T32554] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2027.223112][T32555] FAULT_INJECTION: forcing a failure. [ 2027.223112][T32555] name failslab, interval 1, probability 0, space 0, times 0 [ 2027.227302][T32555] CPU: 1 UID: 0 PID: 32555 Comm: syz.3.6526 Not tainted syzkaller #0 PREEMPT(full) [ 2027.227328][T32555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2027.227336][T32555] Call Trace: [ 2027.227340][T32555] [ 2027.227345][T32555] dump_stack_lvl+0x16c/0x1f0 [ 2027.227363][T32555] should_fail_ex+0x512/0x640 [ 2027.227377][T32555] ? fs_reclaim_acquire+0xae/0x150 [ 2027.227394][T32555] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2027.227409][T32555] should_failslab+0xc2/0x120 [ 2027.227423][T32555] __kmalloc_noprof+0xd2/0x510 [ 2027.227438][T32555] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2027.227454][T32555] ? tomoyo_profile+0x47/0x60 [ 2027.227465][T32555] tomoyo_path_number_perm+0x245/0x580 [ 2027.227477][T32555] ? tomoyo_path_number_perm+0x237/0x580 [ 2027.227491][T32555] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2027.227518][T32555] ? find_held_lock+0x2b/0x80 [ 2027.227529][T32555] ? hook_file_ioctl_common+0x145/0x410 [ 2027.227546][T32555] ? __fget_files+0x20e/0x3c0 [ 2027.227560][T32555] security_file_ioctl_compat+0x9b/0x240 [ 2027.227575][T32555] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2027.227593][T32555] __do_fast_syscall_32+0x7c/0x3a0 [ 2027.227609][T32555] do_fast_syscall_32+0x32/0x80 [ 2027.227623][T32555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2027.227637][T32555] RIP: 0023:0xf7f51579 [ 2027.227646][T32555] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2027.227657][T32555] RSP: 002b:00000000f542455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2027.227667][T32555] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0045006 [ 2027.227674][T32555] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2027.227680][T32555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2027.227686][T32555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2027.227692][T32555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2027.227705][T32555] [ 2027.227756][T32555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2027.623370][T32565] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 2027.623370][T32565] [ 2027.703197][T32566] FAULT_INJECTION: forcing a failure. [ 2027.703197][T32566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2027.707630][T32566] CPU: 1 UID: 0 PID: 32566 Comm: syz.2.6531 Not tainted syzkaller #0 PREEMPT(full) [ 2027.707656][T32566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2027.707664][T32566] Call Trace: [ 2027.707668][T32566] [ 2027.707672][T32566] dump_stack_lvl+0x16c/0x1f0 [ 2027.707690][T32566] should_fail_ex+0x512/0x640 [ 2027.707707][T32566] _copy_from_user+0x2e/0xd0 [ 2027.707724][T32566] move_addr_to_kernel+0x65/0x170 [ 2027.707736][T32566] __sys_connect+0xb1/0x160 [ 2027.707748][T32566] ? __pfx___sys_connect+0x10/0x10 [ 2027.707769][T32566] __ia32_sys_connect+0x71/0xb0 [ 2027.707780][T32566] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2027.707795][T32566] __do_fast_syscall_32+0x7c/0x3a0 [ 2027.707811][T32566] do_fast_syscall_32+0x32/0x80 [ 2027.707825][T32566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2027.707838][T32566] RIP: 0023:0xf70be579 [ 2027.707847][T32566] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2027.707857][T32566] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 2027.707867][T32566] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 2027.707873][T32566] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 2027.707880][T32566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2027.707886][T32566] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2027.707892][T32566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2027.707905][T32566] [ 2027.911659][T23342] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2028.171666][T23342] usb 6-1: Using ep0 maxpacket: 16 [ 2028.177085][T23342] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2028.183907][T23342] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.40 [ 2028.191745][T23342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.196697][T23342] usb 6-1: Product: syz [ 2028.202203][T23342] usb 6-1: Manufacturer: syz [ 2028.203853][T23342] usb 6-1: SerialNumber: syz [ 2028.415465][T24477] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 2028.422639][T23342] usbhid 6-1:1.0: can't add hid device: -71 [ 2028.424767][T23342] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 2028.428172][T23342] usb 6-1: USB disconnect, device number 85 [ 2028.431961][ T6057] IPVS: starting estimator thread 0... [ 2028.531973][T32578] IPVS: using max 27 ests per chain, 64800 per kthread [ 2030.207638][T32613] 9pnet_fd: Insufficient options for proto=fd [ 2030.227731][T32613] : entered promiscuous mode [ 2032.047544][T32647] fuse: Unknown parameter 'grou00000000000000000000' [ 2032.196027][ T40] audit: type=1326 audit(1756971284.441:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.0.6556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2032.205105][ T40] audit: type=1326 audit(1756971284.441:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.0.6556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2032.215054][ T40] audit: type=1326 audit(1756971284.441:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.0.6556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2032.247964][ T40] audit: type=1326 audit(1756971284.491:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.0.6556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2032.255145][ T40] audit: type=1326 audit(1756971284.491:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.0.6556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2032.255168][T32652] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6556'. [ 2032.265509][ T40] audit: type=1326 audit(1756971284.491:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.0.6556" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2032.274401][ T40] audit: type=1326 audit(1756971284.501:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.0.6556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2032.292627][ T40] audit: type=1326 audit(1756971284.501:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.0.6556" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2032.303027][ T40] audit: type=1326 audit(1756971284.501:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.0.6556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2032.314905][ T40] audit: type=1326 audit(1756971284.501:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.0.6556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2033.345105][T32674] : entered promiscuous mode [ 2033.710335][T32679] fuse: Unknown parameter 'grou00000000000000000000' [ 2033.867443][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 2034.402282][T32708] fuse: Unknown parameter 'grou00000000000000000000' [ 2035.545239][T32728] FAULT_INJECTION: forcing a failure. [ 2035.545239][T32728] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.550032][T32728] CPU: 0 UID: 0 PID: 32728 Comm: syz.3.6576 Not tainted syzkaller #0 PREEMPT(full) [ 2035.550048][T32728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2035.550055][T32728] Call Trace: [ 2035.550060][T32728] [ 2035.550065][T32728] dump_stack_lvl+0x16c/0x1f0 [ 2035.550104][T32728] should_fail_ex+0x512/0x640 [ 2035.550120][T32728] ? __kvmalloc_node_noprof+0x124/0x620 [ 2035.550136][T32728] should_failslab+0xc2/0x120 [ 2035.550156][T32728] __kvmalloc_node_noprof+0x137/0x620 [ 2035.550174][T32728] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 2035.550203][T32728] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 2035.550223][T32728] file_tty_write.constprop.0+0x6ef/0x9b0 [ 2035.550246][T32728] ? rw_verify_area+0xcf/0x6c0 [ 2035.550265][T32728] vfs_write+0x7d0/0x11d0 [ 2035.550286][T32728] ? __pfx_tty_write+0x10/0x10 [ 2035.550309][T32728] ? __pfx_vfs_write+0x10/0x10 [ 2035.550328][T32728] ? find_held_lock+0x2b/0x80 [ 2035.550353][T32728] ksys_write+0x12a/0x250 [ 2035.550365][T32728] ? __pfx_ksys_write+0x10/0x10 [ 2035.550378][T32728] ? rcu_is_watching+0x12/0xc0 [ 2035.550391][T32728] __do_fast_syscall_32+0x7c/0x3a0 [ 2035.550436][T32728] do_fast_syscall_32+0x32/0x80 [ 2035.550451][T32728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2035.550465][T32728] RIP: 0023:0xf7f51579 [ 2035.550473][T32728] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2035.550484][T32728] RSP: 002b:00000000f544555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 2035.550494][T32728] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001040 [ 2035.550501][T32728] RDX: 000000000000096d RSI: 0000000000000000 RDI: 0000000000000000 [ 2035.550507][T32728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2035.550512][T32728] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2035.550518][T32728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2035.550532][T32728] [ 2035.622297][T32728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6576'. [ 2035.931698][T14374] Bluetooth: hci4: command 0x1003 tx timeout [ 2035.941448][T24477] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2035.973213][T32739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6579'. [ 2036.206267][T32743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6580'. [ 2036.377620][T32747] netlink: 'syz.3.6581': attribute type 10 has an invalid length. [ 2036.377640][T32747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6581'. [ 2037.001993][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.004046][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.222048][ T6057] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2037.255553][T32751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6583'. [ 2038.117620][T31402] IPVS: starting estimator thread 0... [ 2038.201702][ T324] IPVS: using max 46 ests per chain, 110400 per kthread [ 2044.110885][ T371] fuse: Bad value for 'user_id' [ 2044.112754][ T371] fuse: Bad value for 'user_id' [ 2044.143506][ T374] fuse: Bad value for 'user_id' [ 2044.146381][ T374] fuse: Bad value for 'user_id' [ 2044.148763][ T373] fuse: Bad value for 'user_id' [ 2044.153704][ T373] fuse: Bad value for 'user_id' [ 2044.869153][ T387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2044.873015][ T387] batadv_slave_0: entered promiscuous mode [ 2045.337396][T31396] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2045.411741][ T399] ceph: No mds server is up or the cluster is laggy [ 2045.464461][T31396] usb 7-1: device descriptor read/64, error -71 [ 2045.701654][T31396] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2045.823777][ T405] FAULT_INJECTION: forcing a failure. [ 2045.823777][ T405] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.829109][ T405] CPU: 3 UID: 0 PID: 405 Comm: syz.3.6604 Not tainted syzkaller #0 PREEMPT(full) [ 2045.829132][ T405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2045.829143][ T405] Call Trace: [ 2045.829150][ T405] [ 2045.829156][ T405] dump_stack_lvl+0x16c/0x1f0 [ 2045.829182][ T405] should_fail_ex+0x512/0x640 [ 2045.829207][ T405] ? fs_reclaim_acquire+0xae/0x150 [ 2045.829234][ T405] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2045.829256][ T405] should_failslab+0xc2/0x120 [ 2045.829278][ T405] __kmalloc_noprof+0xd2/0x510 [ 2045.829305][ T405] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2045.829329][ T405] ? tomoyo_profile+0x47/0x60 [ 2045.829349][ T405] tomoyo_path_number_perm+0x245/0x580 [ 2045.829369][ T405] ? tomoyo_path_number_perm+0x237/0x580 [ 2045.829387][ T405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2045.829430][ T405] ? find_held_lock+0x2b/0x80 [ 2045.829447][ T405] ? hook_file_ioctl_common+0x145/0x410 [ 2045.829477][ T405] ? __fget_files+0x20e/0x3c0 [ 2045.829502][ T405] security_file_ioctl_compat+0x9b/0x240 [ 2045.829528][ T405] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2045.829557][ T405] __do_fast_syscall_32+0x7c/0x3a0 [ 2045.829582][ T405] do_fast_syscall_32+0x32/0x80 [ 2045.829606][ T405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2045.829627][ T405] RIP: 0023:0xf7f51579 [ 2045.829642][ T405] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2045.829657][ T405] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2045.829674][ T405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007a9 [ 2045.829684][ T405] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2045.829693][ T405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2045.829702][ T405] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2045.829712][ T405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2045.829735][ T405] [ 2045.829743][ T405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2045.919277][T31396] usb 7-1: device descriptor read/64, error -71 [ 2046.040198][T31396] usb usb7-port1: attempt power cycle [ 2046.391721][T31396] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2046.412670][T31396] usb 7-1: device descriptor read/8, error -71 [ 2046.661644][T31396] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2046.682434][T31396] usb 7-1: device descriptor read/8, error -71 [ 2046.792563][T31396] usb usb7-port1: unable to enumerate USB device [ 2046.985257][ T419] FAULT_INJECTION: forcing a failure. [ 2046.985257][ T419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2046.990205][ T419] CPU: 3 UID: 0 PID: 419 Comm: syz.1.6608 Not tainted syzkaller #0 PREEMPT(full) [ 2046.990223][ T419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2046.990232][ T419] Call Trace: [ 2046.990239][ T419] [ 2046.990247][ T419] dump_stack_lvl+0x16c/0x1f0 [ 2046.990277][ T419] should_fail_ex+0x512/0x640 [ 2046.990323][ T419] _copy_from_user+0x2e/0xd0 [ 2046.990353][ T419] move_addr_to_kernel+0x65/0x170 [ 2046.990374][ T419] __sys_sendto+0x1be/0x520 [ 2046.990396][ T419] ? __pfx___sys_sendto+0x10/0x10 [ 2046.990437][ T419] ? ksys_write+0x1ac/0x250 [ 2046.990459][ T419] ? __pfx_ksys_write+0x10/0x10 [ 2046.990482][ T419] __ia32_sys_sendto+0xdd/0x1b0 [ 2046.990503][ T419] ? lockdep_hardirqs_on+0x7c/0x110 [ 2046.990526][ T419] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2046.990550][ T419] __do_fast_syscall_32+0x7c/0x3a0 [ 2046.990581][ T420] random: crng reseeded on system resumption [ 2046.990576][ T419] do_fast_syscall_32+0x32/0x80 [ 2046.990600][ T419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2046.990622][ T419] RIP: 0023:0xf709e579 [ 2046.990636][ T419] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2046.990653][ T419] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 2046.990670][ T419] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2046.990682][ T419] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000080000540 [ 2046.990691][ T419] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 2046.990702][ T419] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2046.990711][ T419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2046.990733][ T419] [ 2047.095623][ T425] [U]  [ 2047.371376][ T441] FAULT_INJECTION: forcing a failure. [ 2047.371376][ T441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2047.376691][ T441] CPU: 3 UID: 0 PID: 441 Comm: syz.3.6615 Not tainted syzkaller #0 PREEMPT(full) [ 2047.376707][ T441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2047.376714][ T441] Call Trace: [ 2047.376718][ T441] [ 2047.376722][ T441] dump_stack_lvl+0x16c/0x1f0 [ 2047.376740][ T441] should_fail_ex+0x512/0x640 [ 2047.376757][ T441] _copy_from_user+0x2e/0xd0 [ 2047.376773][ T441] get_compat_msghdr+0xa7/0x170 [ 2047.376788][ T441] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2047.376802][ T441] ? __pfx__kstrtoull+0x10/0x10 [ 2047.376816][ T441] ___sys_sendmsg+0x1ae/0x1d0 [ 2047.376831][ T441] ? __pfx____sys_sendmsg+0x10/0x10 [ 2047.376861][ T441] __sys_sendmmsg+0x2f9/0x420 [ 2047.376876][ T441] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2047.376894][ T441] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2047.376915][ T441] ? fput+0x9b/0xd0 [ 2047.376930][ T441] ? ksys_write+0x1ac/0x250 [ 2047.376941][ T441] ? __pfx_ksys_write+0x10/0x10 [ 2047.376955][ T441] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2047.376969][ T441] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 2047.376987][ T441] __do_fast_syscall_32+0x7c/0x3a0 [ 2047.377002][ T441] do_fast_syscall_32+0x32/0x80 [ 2047.377016][ T441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2047.377030][ T441] RIP: 0023:0xf7f51579 [ 2047.377039][ T441] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2047.377049][ T441] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 2047.377060][ T441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 2047.377066][ T441] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000 [ 2047.377072][ T441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2047.377078][ T441] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2047.377085][ T441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2047.377097][ T441] [ 2047.443835][ C3] vkms_vblank_simulate: vblank timer overrun [ 2047.842200][ T448] FAULT_INJECTION: forcing a failure. [ 2047.842200][ T448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2047.846341][ T448] CPU: 3 UID: 0 PID: 448 Comm: syz.0.6618 Not tainted syzkaller #0 PREEMPT(full) [ 2047.846356][ T448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2047.846363][ T448] Call Trace: [ 2047.846367][ T448] [ 2047.846371][ T448] dump_stack_lvl+0x16c/0x1f0 [ 2047.846389][ T448] should_fail_ex+0x512/0x640 [ 2047.846406][ T448] _copy_from_user+0x2e/0xd0 [ 2047.846422][ T448] get_compat_msghdr+0xa7/0x170 [ 2047.846437][ T448] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2047.846454][ T448] ___sys_sendmsg+0x1ae/0x1d0 [ 2047.846470][ T448] ? __pfx____sys_sendmsg+0x10/0x10 [ 2047.846489][ T448] ? find_held_lock+0x2b/0x80 [ 2047.846509][ T448] __sys_sendmsg+0x16d/0x220 [ 2047.846523][ T448] ? __pfx___sys_sendmsg+0x10/0x10 [ 2047.846542][ T448] ? rcu_is_watching+0x12/0xc0 [ 2047.846555][ T448] __do_fast_syscall_32+0x7c/0x3a0 [ 2047.846571][ T448] do_fast_syscall_32+0x32/0x80 [ 2047.846585][ T448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2047.846599][ T448] RIP: 0023:0xf70de579 [ 2047.846607][ T448] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2047.846618][ T448] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2047.846628][ T448] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2047.846635][ T448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2047.846641][ T448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2047.846647][ T448] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2047.846653][ T448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2047.846666][ T448] [ 2047.904667][ C3] vkms_vblank_simulate: vblank timer overrun [ 2048.352107][ T467] fuse: Bad value for 'user_id' [ 2048.353746][ T467] fuse: Bad value for 'user_id' [ 2048.607082][ T480] FAULT_INJECTION: forcing a failure. [ 2048.607082][ T480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2048.611120][ T480] CPU: 2 UID: 0 PID: 480 Comm: syz.2.6628 Not tainted syzkaller #0 PREEMPT(full) [ 2048.611135][ T480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2048.611141][ T480] Call Trace: [ 2048.611146][ T480] [ 2048.611150][ T480] dump_stack_lvl+0x16c/0x1f0 [ 2048.611168][ T480] should_fail_ex+0x512/0x640 [ 2048.611185][ T480] _copy_from_iter+0x29f/0x1720 [ 2048.611202][ T480] ? __lock_acquire+0x62e/0x1ce0 [ 2048.611217][ T480] ? __pfx__copy_from_iter+0x10/0x10 [ 2048.611239][ T480] copy_page_from_iter+0xde/0x180 [ 2048.611256][ T480] tun_build_skb.constprop.0+0x2e8/0x1500 [ 2048.611273][ T480] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 2048.611287][ T480] ? __lock_acquire+0x62e/0x1ce0 [ 2048.611309][ T480] tun_get_user+0x14ae/0x3ce0 [ 2048.611325][ T480] ? __pfx_tun_get_user+0x10/0x10 [ 2048.611336][ T480] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2048.611356][ T480] ? find_held_lock+0x2b/0x80 [ 2048.611366][ T480] ? tun_get+0x191/0x370 [ 2048.611385][ T480] tun_chr_write_iter+0xdc/0x210 [ 2048.611396][ T480] vfs_write+0x7d0/0x11d0 [ 2048.611409][ T480] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2048.611421][ T480] ? __pfx_vfs_write+0x10/0x10 [ 2048.611432][ T480] ? find_held_lock+0x2b/0x80 [ 2048.611450][ T480] ksys_write+0x12a/0x250 [ 2048.611461][ T480] ? __pfx_ksys_write+0x10/0x10 [ 2048.611474][ T480] ? rcu_is_watching+0x12/0xc0 [ 2048.611487][ T480] __do_fast_syscall_32+0x7c/0x3a0 [ 2048.611503][ T480] do_fast_syscall_32+0x32/0x80 [ 2048.611529][ T480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2048.611544][ T480] RIP: 0023:0xf70be579 [ 2048.611552][ T480] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2048.611562][ T480] RSP: 002b:00000000f54ae520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 2048.611572][ T480] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000140 [ 2048.611579][ T480] RDX: 0000000000000036 RSI: 00000000f7434ff4 RDI: 0000000000000000 [ 2048.611585][ T480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2048.611591][ T480] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2048.611597][ T480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2048.611610][ T480] [ 2048.788754][ T485] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6626'. [ 2048.804565][ T485] batadv1: entered allmulticast mode [ 2048.865149][ T486] input: syz1 as /devices/virtual/input/input28 [ 2049.546390][ T502] netlink: 'syz.0.6634': attribute type 10 has an invalid length. [ 2049.548932][ T502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6634'. [ 2049.551823][ T502] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2049.752161][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6637'. [ 2049.871682][T27690] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2050.084735][ T532] fuse: Bad value for 'user_id' [ 2050.086189][ T532] fuse: Bad value for 'user_id' [ 2050.738395][ T554] FAULT_INJECTION: forcing a failure. [ 2050.738395][ T554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2050.743262][ T554] CPU: 3 UID: 0 PID: 554 Comm: syz.3.6645 Not tainted syzkaller #0 PREEMPT(full) [ 2050.743279][ T554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2050.743286][ T554] Call Trace: [ 2050.743290][ T554] [ 2050.743295][ T554] dump_stack_lvl+0x16c/0x1f0 [ 2050.743327][ T554] should_fail_ex+0x512/0x640 [ 2050.743344][ T554] _copy_to_user+0x32/0xd0 [ 2050.743355][ T554] simple_read_from_buffer+0xcb/0x170 [ 2050.743368][ T554] proc_fail_nth_read+0x197/0x240 [ 2050.743381][ T554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2050.743393][ T554] ? rw_verify_area+0xcf/0x6c0 [ 2050.743404][ T554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2050.743415][ T554] vfs_read+0x1e4/0xcf0 [ 2050.743430][ T554] ? __pfx_vfs_read+0x10/0x10 [ 2050.743440][ T554] ? find_held_lock+0x2b/0x80 [ 2050.743455][ T554] ? __fget_files+0x20e/0x3c0 [ 2050.743471][ T554] ksys_read+0x12a/0x250 [ 2050.743482][ T554] ? __pfx_ksys_read+0x10/0x10 [ 2050.743495][ T554] ? rcu_is_watching+0x12/0xc0 [ 2050.743508][ T554] __do_fast_syscall_32+0x7c/0x3a0 [ 2050.743524][ T554] do_fast_syscall_32+0x32/0x80 [ 2050.743538][ T554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2050.743552][ T554] RIP: 0023:0xf7f51579 [ 2050.743561][ T554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2050.743571][ T554] RSP: 002b:00000000f5466590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2050.743581][ T554] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5466620 [ 2050.743587][ T554] RDX: 000000000000000f RSI: 00000000f73e4ff4 RDI: 0000000000000000 [ 2050.743594][ T554] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2050.743599][ T554] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2050.743605][ T554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2050.743619][ T554] [ 2051.132005][T24477] Bluetooth: hci2: command 0x0405 tx timeout [ 2056.871828][T31396] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 2057.155356][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6650'. [ 2057.191867][T31396] usb 8-1: Using ep0 maxpacket: 8 [ 2057.195258][T31396] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 2057.197731][T31396] usb 8-1: config 0 has no interface number 0 [ 2057.199541][T31396] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2057.202740][T31396] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2057.206101][T31396] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2057.209255][T31396] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2057.213232][T31396] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2057.215890][T31396] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.220273][T31396] usb 8-1: config 0 descriptor?? [ 2057.224045][T31396] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2057.437900][T19050] usb 8-1: USB disconnect, device number 83 [ 2057.441819][T19050] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 2057.570914][ T593] syzkaller0: entered promiscuous mode [ 2057.573842][ T593] syzkaller0: entered allmulticast mode [ 2057.964038][ T601] netlink: 'syz.2.6654': attribute type 10 has an invalid length. [ 2057.967724][ T601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6654'. [ 2057.971622][ T601] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2058.057230][ T607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6656'. [ 2060.092520][ T623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6659'. [ 2060.747461][ T634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6662'. [ 2060.769112][ T635] netlink: 'syz.3.6661': attribute type 1 has an invalid length. [ 2060.781719][ T635] netlink: 'syz.3.6661': attribute type 2 has an invalid length. [ 2060.807011][ T637] FAULT_INJECTION: forcing a failure. [ 2060.807011][ T637] name failslab, interval 1, probability 0, space 0, times 0 [ 2060.814197][ T637] CPU: 1 UID: 0 PID: 637 Comm: syz.1.6663 Not tainted syzkaller #0 PREEMPT(full) [ 2060.814233][ T637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2060.814245][ T637] Call Trace: [ 2060.814251][ T637] [ 2060.814257][ T637] dump_stack_lvl+0x16c/0x1f0 [ 2060.814286][ T637] should_fail_ex+0x512/0x640 [ 2060.814321][ T637] ? fs_reclaim_acquire+0xae/0x150 [ 2060.814348][ T637] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2060.814371][ T637] should_failslab+0xc2/0x120 [ 2060.814396][ T637] __kmalloc_noprof+0xd2/0x510 [ 2060.814422][ T637] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2060.814448][ T637] ? tomoyo_profile+0x47/0x60 [ 2060.814466][ T637] tomoyo_path_number_perm+0x245/0x580 [ 2060.814486][ T637] ? tomoyo_path_number_perm+0x237/0x580 [ 2060.814509][ T637] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2060.814561][ T637] ? find_held_lock+0x2b/0x80 [ 2060.814581][ T637] ? hook_file_ioctl_common+0x145/0x410 [ 2060.814608][ T637] ? __fget_files+0x20e/0x3c0 [ 2060.814633][ T637] security_file_ioctl_compat+0x9b/0x240 [ 2060.814657][ T637] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2060.814687][ T637] __do_fast_syscall_32+0x7c/0x3a0 [ 2060.814714][ T637] do_fast_syscall_32+0x32/0x80 [ 2060.814737][ T637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2060.814760][ T637] RIP: 0023:0xf709e579 [ 2060.814773][ T637] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2060.814789][ T637] RSP: 002b:00000000f548e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2060.814806][ T637] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008953 [ 2060.814815][ T637] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 2060.814823][ T637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2060.814832][ T637] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2060.814842][ T637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2060.814865][ T637] [ 2060.815050][ T637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2061.245310][ T653] fuse: Bad value for 'user_id' [ 2061.247023][ T653] fuse: Bad value for 'user_id' [ 2061.852732][ T662] netlink: 'syz.2.6668': attribute type 10 has an invalid length. [ 2061.856054][ T662] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6668'. [ 2061.859904][ T662] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2062.084678][ T669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6669'. [ 2062.457369][ T671] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6669'. [ 2062.973935][ T686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6674'. [ 2063.607838][ T705] fuse: Bad value for 'user_id' [ 2063.610005][ T705] fuse: Bad value for 'user_id' [ 2063.998947][ T715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6681'. [ 2064.113810][ T719] netlink: 'syz.3.6680': attribute type 10 has an invalid length. [ 2064.116399][ T719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6680'. [ 2065.132982][ T736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6687'. [ 2066.072341][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 2066.072353][ T40] audit: type=1326 audit(1756971318.321:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=760 comm="syz.3.6694" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2066.079962][ T40] audit: type=1326 audit(1756971318.321:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=760 comm="syz.3.6694" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2066.094137][ T40] audit: type=1326 audit(1756971318.331:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=760 comm="syz.3.6694" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2066.101310][ T40] audit: type=1326 audit(1756971318.331:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=760 comm="syz.3.6694" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2066.111421][ T40] audit: type=1326 audit(1756971318.331:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=760 comm="syz.3.6694" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2066.118364][ T40] audit: type=1326 audit(1756971318.331:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=760 comm="syz.3.6694" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2066.125125][ T40] audit: type=1326 audit(1756971318.331:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=760 comm="syz.3.6694" exe="/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2066.132067][ T40] audit: type=1326 audit(1756971318.331:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=760 comm="syz.3.6694" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2066.372446][T19050] usb 8-1: new full-speed USB device number 84 using dummy_hcd [ 2066.533554][T19050] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 2066.537031][T19050] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2066.539845][T19050] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.543456][T19050] usb 8-1: config 0 descriptor?? [ 2066.957502][T19050] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 2067.071660][T31402] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2067.224901][T25323] usb 8-1: USB disconnect, device number 84 [ 2067.235860][T31402] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2067.239486][T31402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.242785][T31402] usb 6-1: Product: syz [ 2067.244450][T31402] usb 6-1: Manufacturer: syz [ 2067.246357][T31402] usb 6-1: SerialNumber: syz [ 2067.364553][ T786] overlayfs: failed to resolve './cgroup': -2 [ 2067.369373][ T786] overlayfs: failed to clone upperpath [ 2067.885560][T31402] rtl8150 6-1:1.0: couldn't reset the device [ 2067.887603][T31402] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 2067.892515][T31402] usb 6-1: USB disconnect, device number 86 [ 2069.161655][T25323] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 2069.311618][T25323] usb 7-1: Using ep0 maxpacket: 32 [ 2069.318749][T25323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2069.327937][T25323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2069.330988][T25323] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2069.338046][T25323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.343386][T25323] usb 7-1: config 0 descriptor?? [ 2069.349145][T25323] hub 7-1:0.0: USB hub found [ 2069.433302][ T836] veth0_to_team: entered promiscuous mode [ 2069.435166][ T836] veth0_to_team: entered allmulticast mode [ 2069.553633][T25323] hub 7-1:0.0: 1 port detected [ 2069.959775][T25323] usb 7-1: USB disconnect, device number 69 [ 2070.322647][ T863] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2070.971949][ T890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6739'. [ 2071.006722][ T892] tipc: Enabling of bearer rejected, failed to enable media [ 2071.120356][ T898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6743'. [ 2071.685586][ T904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6745'. [ 2071.710915][ T906] syz.3.6746(906): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2072.647729][ T937] hub 9-0:1.0: USB hub found [ 2072.650329][ T937] hub 9-0:1.0: 1 port detected [ 2073.775648][ T979] overlayfs: missing 'lowerdir' [ 2074.057077][ T988] syz_tun: entered allmulticast mode [ 2074.088176][ T987] syz_tun: left allmulticast mode [ 2074.237670][ T1000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6771'. [ 2075.952279][ T1039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2077.398438][ T1065] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 2079.651617][T25323] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2079.734602][ T1137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6805'. [ 2079.813041][T25323] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2079.816255][T25323] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2079.819990][T25323] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2079.823333][T25323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2079.826097][T25323] usb 6-1: SerialNumber: syz [ 2080.034457][T25323] usb 6-1: 0:2 : does not exist [ 2080.042009][T25323] usb 6-1: USB disconnect, device number 87 [ 2080.150414][ T1147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6808'. [ 2080.154022][ T1147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'. [ 2080.268250][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2081.234793][ T1184] overlayfs: missing 'lowerdir' [ 2081.248021][ T1184] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 2081.772374][ T1194] overlayfs: missing 'lowerdir' [ 2081.870931][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 2081.873478][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 2081.881420][ T1194] bond0: left promiscuous mode [ 2081.883643][ T1194] bond_slave_0: left promiscuous mode [ 2081.885627][ T1194] bond_slave_1: left promiscuous mode [ 2081.970514][ T1194] batadv_slave_0: left promiscuous mode [ 2081.979062][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2082.098602][ T1194] bridge2: left promiscuous mode [ 2082.100211][ T1194] bridge2: left allmulticast mode [ 2082.103161][ T1194] bridge3: left promiscuous mode [ 2082.109503][T26284] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.113007][T26284] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.116572][T26284] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.120203][T26284] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2085.293982][T14374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2085.298133][T14374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2085.301008][T14374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2085.304514][T14374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2085.307419][T14374] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2085.399831][ T1298] chnl_net:caif_netlink_parms(): no params data found [ 2085.465615][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 2085.468489][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state [ 2085.471262][ T1298] bridge_slave_0: entered allmulticast mode [ 2085.473951][ T1298] bridge_slave_0: entered promiscuous mode [ 2085.477006][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state [ 2085.479340][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state [ 2085.481748][ T1298] bridge_slave_1: entered allmulticast mode [ 2085.484305][ T1298] bridge_slave_1: entered promiscuous mode [ 2085.523552][ T1298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2085.529696][ T1298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2085.572763][ T1298] team0: Port device team_slave_0 added [ 2085.576151][ T1298] team0: Port device team_slave_1 added [ 2085.596038][ T1312] overlayfs: failed to clone upperpath [ 2085.609032][ T1298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2085.611407][ T1298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2085.620643][ T1298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2085.625165][ T1298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2085.627424][ T1298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2085.635585][ T1298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2085.711498][ T1298] hsr_slave_0: entered promiscuous mode [ 2085.713768][ T1298] hsr_slave_1: entered promiscuous mode [ 2085.715829][ T1298] debugfs: 'hsr0' already exists in 'hsr' [ 2085.717606][ T1298] Cannot create hsr debugfs directory [ 2086.007975][ T1326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6839'. [ 2086.283317][ T1298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2086.287287][ T1298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2086.291387][ T1298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2086.296478][ T1298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2086.320889][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state [ 2086.324077][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2086.327232][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 2086.329829][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2086.336265][ T1219] bridge0: port 1(bridge_slave_0) entered disabled state [ 2086.339830][ T1219] bridge0: port 2(bridge_slave_1) entered disabled state [ 2086.385880][ T1298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2086.396165][ T1298] 8021q: adding VLAN 0 to HW filter on device team0 [ 2086.403804][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 2086.406124][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2086.413014][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 2086.415401][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2086.531883][ T9185] usb 8-1: new full-speed USB device number 85 using dummy_hcd [ 2086.544966][ T1298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2086.566540][ T1298] veth0_vlan: entered promiscuous mode [ 2086.571469][ T1298] veth1_vlan: entered promiscuous mode [ 2086.586642][ T1298] veth0_macvtap: entered promiscuous mode [ 2086.590310][ T1298] veth1_macvtap: entered promiscuous mode [ 2086.600986][ T1298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2086.606728][ T1298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2086.624357][ T1274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.630453][ T1274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.636420][ T1274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.645558][ T1274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.664982][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.667855][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.693125][ T9185] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2086.693205][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.696614][ T9185] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2086.698943][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.702014][ T9185] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2086.702031][ T9185] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.703031][ T9185] usb 8-1: config 0 descriptor?? [ 2087.120201][ T9185] hid_parser_main: 27 callbacks suppressed [ 2087.120214][ T9185] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 2087.124340][ T9185] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 2087.126515][ T9185] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 2087.128641][ T9185] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 2087.130745][ T9185] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 2087.134446][ T9185] savu 0003:1E7D:2D5A.0007: unbalanced collection at end of report description [ 2087.137606][ T9185] savu 0003:1E7D:2D5A.0007: parse failed [ 2087.139396][ T9185] savu 0003:1E7D:2D5A.0007: probe with driver savu failed with error -22 [ 2087.320918][ T9185] usb 8-1: USB disconnect, device number 85 [ 2087.372903][T24477] Bluetooth: hci3: command tx timeout [ 2087.743674][ T1369] binder: 1368:1369 ioctl c0306201 80000180 returned -14 [ 2088.272516][ T1367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6849'. [ 2088.275464][ T1367] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2089.461727][T24477] Bluetooth: hci3: command tx timeout [ 2089.551713][T14906] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2089.711620][T14906] usb 7-1: Using ep0 maxpacket: 8 [ 2089.715838][T14906] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2089.718697][T14906] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2089.722544][T14906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.728113][T14906] usb 7-1: config 0 descriptor?? [ 2090.138046][T14906] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2090.336428][T31396] usb 7-1: USB disconnect, device number 70 [ 2090.732202][T27690] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 2090.881588][T27690] usb 8-1: Using ep0 maxpacket: 16 [ 2090.885796][T27690] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2090.892134][T27690] usb 8-1: config 0 has no interfaces? [ 2090.895876][T27690] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2090.898786][T27690] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.901332][T27690] usb 8-1: Product: syz [ 2090.902853][T27690] usb 8-1: Manufacturer: syz [ 2090.906701][T27690] usb 8-1: SerialNumber: syz [ 2090.913492][T27690] r8152-cfgselector 8-1: Unknown version 0x0000 [ 2090.917750][T27690] r8152-cfgselector 8-1: config 0 descriptor?? [ 2091.221708][T14906] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2091.383817][T14906] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2091.388312][T14906] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2091.394129][T14906] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2091.398011][T14906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2091.401683][T14906] usb 6-1: SerialNumber: syz [ 2091.531715][T24477] Bluetooth: hci3: command tx timeout [ 2091.614761][T14906] usb 6-1: 0:2 : does not exist [ 2091.626297][T14906] usb 6-1: USB disconnect, device number 88 [ 2092.213920][ T1440] tipc: Enabling of bearer rejected, failed to enable media [ 2093.415095][ T1468] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 2093.514616][ T6057] r8152-cfgselector 8-1: USB disconnect, device number 86 [ 2093.540642][ T1470] bridge2: entered promiscuous mode [ 2093.612080][T24477] Bluetooth: hci3: command tx timeout [ 2094.190607][ T1484] random: crng reseeded on system resumption [ 2094.983386][ T1521] wireguard0: entered promiscuous mode [ 2094.985193][ T1521] wireguard0: entered allmulticast mode [ 2095.281610][T14906] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2095.431638][T14906] usb 6-1: Using ep0 maxpacket: 16 [ 2095.434855][T14906] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 2095.437390][T14906] usb 6-1: config 0 has no interface number 0 [ 2095.439403][T14906] usb 6-1: config 0 interface 128 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 2095.444391][T14906] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01d3, bcdDevice= 1.16 [ 2095.447213][T14906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.449682][T14906] usb 6-1: Product: syz [ 2095.451028][T14906] usb 6-1: Manufacturer: syz [ 2095.452654][T14906] usb 6-1: SerialNumber: syz [ 2095.456431][T14906] usb 6-1: config 0 descriptor?? [ 2095.459149][ T1524] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2095.462421][T14906] ftdi_sio 6-1:0.128: FTDI USB Serial Device converter detected [ 2095.465228][T14906] usb 6-1: Detected SIO [ 2095.467572][T14906] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2095.672102][ T6057] usb 6-1: USB disconnect, device number 89 [ 2095.677146][ T6057] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2095.680194][ T6057] ftdi_sio 6-1:0.128: device disconnected [ 2096.742652][ T1548] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6907'. [ 2096.758681][ T40] audit: type=1326 audit(1756971349.001:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1549 comm="syz.0.6908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2096.765873][ T40] audit: type=1326 audit(1756971349.001:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1549 comm="syz.0.6908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2096.773110][ T40] audit: type=1326 audit(1756971349.001:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1549 comm="syz.0.6908" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2096.779707][ T40] audit: type=1326 audit(1756971349.001:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1549 comm="syz.0.6908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2096.786586][ T40] audit: type=1326 audit(1756971349.001:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1549 comm="syz.0.6908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2096.793150][ T40] audit: type=1326 audit(1756971349.001:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1549 comm="syz.0.6908" exe="/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2096.799600][ T40] audit: type=1326 audit(1756971349.001:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1549 comm="syz.0.6908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2096.806165][ T40] audit: type=1326 audit(1756971349.001:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1549 comm="syz.0.6908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 2097.261609][T29031] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2097.431642][T29031] usb 7-1: Using ep0 maxpacket: 32 [ 2097.435062][T29031] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2097.437884][T29031] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2097.440710][T29031] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2097.443667][T29031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2097.446762][T29031] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2097.449937][T29031] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2097.454222][T29031] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2097.457128][T29031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.463623][T29031] usb 7-1: config 0 descriptor?? [ 2097.491644][T14906] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2097.652935][T14906] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 2097.655627][T14906] usb 6-1: config 0 has no interface number 0 [ 2097.657604][T14906] usb 6-1: config 0 interface 128 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2097.661077][T14906] usb 6-1: config 0 interface 128 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2097.665014][T14906] usb 6-1: config 0 interface 128 has no altsetting 0 [ 2097.670681][T14906] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2097.674824][T29031] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2097.681384][T29031] usb 7-1: USB disconnect, device number 71 [ 2097.681575][T14906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.685932][T29031] usblp0: removed [ 2097.687081][T14906] usb 6-1: config 0 descriptor?? [ 2098.098983][T14906] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 2098.111631][T29031] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2098.261626][T29031] usb 7-1: Using ep0 maxpacket: 32 [ 2098.266856][T29031] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2098.270404][T29031] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2098.274191][T29031] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2098.277922][T29031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2098.281977][T29031] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2098.285867][T29031] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2098.291028][T29031] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2098.294849][T29031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.300234][T29031] usb 7-1: config 0 descriptor?? [ 2098.301130][T31396] usb 6-1: USB disconnect, device number 90 [ 2098.413528][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.415614][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.508539][T29031] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2098.709834][ T6057] usb 7-1: USB disconnect, device number 72 [ 2098.713923][ T6057] usblp0: removed [ 2101.173918][ T1620] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6929'. [ 2101.177728][ T1620] gretap0: entered promiscuous mode [ 2101.721644][ T6057] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2101.874647][ T6057] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2101.879984][ T6057] usb 6-1: config 204 has an invalid interface number: 223 but max is 0 [ 2101.883493][ T6057] usb 6-1: config 204 has no interface number 0 [ 2101.886126][ T6057] usb 6-1: config 204 interface 223 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2101.891507][ T6057] usb 6-1: config 204 interface 223 has no altsetting 0 [ 2101.898820][ T6057] usb 6-1: New USB device found, idVendor=0b57, idProduct=5942, bcdDevice=38.7a [ 2101.903378][ T6057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.905953][ T6057] usb 6-1: Product: syz [ 2101.907348][ T6057] usb 6-1: Manufacturer: syz [ 2101.908860][ T6057] usb 6-1: SerialNumber: syz [ 2102.121804][ T6057] usbhid 6-1:204.223: couldn't find an input interrupt endpoint [ 2102.128114][ T6057] usb 6-1: USB disconnect, device number 91 [ 2102.761448][ T1657] tipc: Started in network mode [ 2102.763898][ T1657] tipc: Node identity 36d28b970ec6, cluster identity 4711 [ 2102.766714][ T1657] tipc: Enabled bearer , priority 0 [ 2102.770737][ T1657] syzkaller0: entered promiscuous mode [ 2102.772825][ T1657] syzkaller0: entered allmulticast mode [ 2102.787456][ T1657] tipc: Resetting bearer [ 2102.798289][ T1656] tipc: Resetting bearer [ 2102.809159][ T1656] tipc: Disabling bearer [ 2102.933166][ T1662] 8021q: adding VLAN 0 to HW filter on device team0 [ 2102.953505][ T1662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2104.050751][ T1693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2104.363893][ T1701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6955'. [ 2106.532757][ T1765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2106.535803][ T1765] 8021q: adding VLAN 0 to HW filter on device team0 [ 2106.539995][ T1765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2107.041758][ T6057] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2107.194590][ T6057] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 2107.197143][ T6057] usb 6-1: config 0 has no interface number 1 [ 2107.199078][ T6057] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2107.202230][ T6057] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2107.206369][ T6057] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 2107.209176][ T6057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2107.211756][ T6057] usb 6-1: SerialNumber: syz [ 2107.214345][ T6057] usb 6-1: config 0 descriptor?? [ 2107.420760][ T6057] usb 6-1: Found UVC 0.00 device (0002:0000) [ 2107.423178][ T6057] usb 6-1: No valid video chain found. [ 2107.426978][ T6057] usb 6-1: USB disconnect, device number 92 [ 2107.759584][ T1786] tipc: Enabling of bearer rejected, failed to enable media [ 2108.053040][ T1807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6992'. [ 2111.624692][ T1893] fuse: root generation should be zero [ 2111.889986][ T1904] overlayfs: missing 'lowerdir' [ 2112.165334][ T1908] futex_wake_op: syz.3.7023 tries to shift op by 32; fix this program [ 2112.211174][ T1916] tipc: Enabled bearer , priority 0 [ 2112.214246][ T1916] syzkaller0: entered promiscuous mode [ 2112.215975][ T1916] syzkaller0: entered allmulticast mode [ 2112.223443][ T1916] tipc: Resetting bearer [ 2112.226787][ T1915] tipc: Resetting bearer [ 2112.235765][ T1915] tipc: Disabling bearer [ 2112.658059][ T1924] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7029'. [ 2112.661162][ T1924] gretap0: entered promiscuous mode [ 2112.663570][ T1924] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7029'. [ 2112.667676][ T1924] 0ªX¹¦D: renamed from gretap0 [ 2112.672059][ T1924] 0ªX¹¦D: left promiscuous mode [ 2112.673818][ T1924] 0ªX¹¦D: entered allmulticast mode [ 2112.676790][ T1924] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2112.883901][ T1936] ------------[ cut here ]------------ [ 2112.885694][ T1936] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x1f, 0x1f] s64=[0x1f, 0x1f] u32=[0x1f, 0x17] s32=[0x1f, 0x1f] var_off=(0x1f, 0x0)(1) [ 2112.890806][ T1936] WARNING: CPU: 3 PID: 1936 at kernel/bpf/verifier.c:2722 reg_bounds_sanity_check+0x62b/0x1200 [ 2112.894200][ T1936] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2112.895474][ T1936] CPU: 3 UID: 0 PID: 1936 Comm: syz.3.7033 Not tainted syzkaller #0 PREEMPT(full) [ 2112.899835][ T1936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2112.903245][ T1936] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 2112.905240][ T1936] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 e6 b8 ab ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 2112.911460][ T1936] RSP: 0018:ffffc90003fdf2e8 EFLAGS: 00010282 [ 2112.913536][ T1936] RAX: 0000000000000000 RBX: 000000000000001f RCX: ffffc90031d4e000 [ 2112.916031][ T1936] RDX: 0000000000080000 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 2112.918498][ T1936] RBP: ffffc90003fdf3e0 R08: 0000000000000001 R09: 0000000000000000 [ 2112.921100][ T1936] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880794c8000 [ 2112.923768][ T1936] R13: ffff888055f251bc R14: ffff888055f251b4 R15: ffff888055f25168 [ 2112.926258][ T1936] FS: 0000000000000000(0000) GS:ffff8880977c0000(0063) knlGS:00000000f5466b40 [ 2112.929155][ T1936] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2112.931218][ T1936] CR2: 00000000f7366a0c CR3: 000000005b121000 CR4: 0000000000352ef0 [ 2112.933767][ T1936] DR0: 000000000000000a DR1: 0000000000000002 DR2: 0000000000000003 [ 2112.936256][ T1936] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2112.938738][ T1936] Call Trace: [ 2112.940199][ T1936] [ 2112.941639][ T1936] reg_set_min_max+0x183/0x2c0 [ 2112.943762][ T1936] check_cond_jmp_op+0x19b0/0x72d0 [ 2112.943809][ T1936] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 2112.947745][ T1936] ? push_jmp_history+0x294/0x790 [ 2112.950009][ T1936] do_check_common+0xa13e/0xb410 [ 2112.952222][ T1936] ? __pfx_do_check_common+0x10/0x10 [ 2112.954487][ T1936] ? local_clock_noinstr+0xb1/0xe0 [ 2112.956694][ T1936] ? kfree+0x2b4/0x4d0 [ 2112.958514][ T1936] ? bpf_check+0x7cf8/0xc4d0 [ 2112.960573][ T1936] bpf_check+0x8763/0xc4d0 [ 2112.962589][ T1936] ? __pfx_bpf_check+0x10/0x10 [ 2112.964615][ T1936] ? __lock_acquire+0xb97/0x1ce0 [ 2112.966888][ T1936] ? __asan_memset+0x23/0x50 [ 2112.968489][ T1936] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 2112.970069][ T1936] bpf_prog_load+0xe41/0x2490 [ 2112.971623][ T1936] ? __pfx_bpf_prog_load+0x10/0x10 [ 2112.973279][ T1936] __sys_bpf+0x4a3f/0x4de0 [ 2112.974743][ T1936] ? __pfx___sys_bpf+0x10/0x10 [ 2112.976338][ T1936] ? do_futex+0x122/0x350 [ 2112.977770][ T1936] ? __pfx_do_futex+0x10/0x10 [ 2112.979265][ T1936] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 2112.981184][ T1936] __ia32_sys_bpf+0x76/0xe0 [ 2112.982987][ T1936] __do_fast_syscall_32+0x7c/0x3a0 [ 2112.984633][ T1936] do_fast_syscall_32+0x32/0x80 [ 2112.986206][ T1936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2112.988240][ T1936] RIP: 0023:0xf7f51579 [ 2112.989549][ T1936] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2112.995566][ T1936] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2112.998346][ T1936] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 2113.000811][ T1936] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 2113.003395][ T1936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2113.005861][ T1936] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2113.008281][ T1936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2113.010762][ T1936] [ 2113.011809][ T1936] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2113.014083][ T1936] CPU: 3 UID: 0 PID: 1936 Comm: syz.3.7033 Not tainted syzkaller #0 PREEMPT(full) [ 2113.016963][ T1936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2113.020327][ T1936] Call Trace: [ 2113.021419][ T1936] [ 2113.022395][ T1936] dump_stack_lvl+0x3d/0x1f0 [ 2113.023863][ T1936] vpanic+0x6e8/0x7a0 [ 2113.025153][ T1936] ? __pfx_vpanic+0x10/0x10 [ 2113.026609][ T1936] ? reg_bounds_sanity_check+0x62b/0x1200 [ 2113.028433][ T1936] panic+0xca/0xd0 [ 2113.029621][ T1936] ? __pfx_panic+0x10/0x10 [ 2113.031046][ T1936] check_panic_on_warn+0xab/0xb0 [ 2113.032629][ T1936] __warn+0xf6/0x3c0 [ 2113.033881][ T1936] ? reg_bounds_sanity_check+0x62b/0x1200 [ 2113.035666][ T1936] report_bug+0x3c3/0x580 [ 2113.037035][ T1936] ? reg_bounds_sanity_check+0x62b/0x1200 [ 2113.038828][ T1936] handle_bug+0x184/0x210 [ 2113.040195][ T1936] exc_invalid_op+0x17/0x50 [ 2113.041632][ T1936] asm_exc_invalid_op+0x1a/0x20 [ 2113.043189][ T1936] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 2113.045171][ T1936] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 e6 b8 ab ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 2113.051093][ T1936] RSP: 0018:ffffc90003fdf2e8 EFLAGS: 00010282 [ 2113.053011][ T1936] RAX: 0000000000000000 RBX: 000000000000001f RCX: ffffc90031d4e000 [ 2113.055481][ T1936] RDX: 0000000000080000 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 2113.057974][ T1936] RBP: ffffc90003fdf3e0 R08: 0000000000000001 R09: 0000000000000000 [ 2113.060433][ T1936] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880794c8000 [ 2113.062910][ T1936] R13: ffff888055f251bc R14: ffff888055f251b4 R15: ffff888055f25168 [ 2113.065426][ T1936] ? __warn_printk+0x1a5/0x350 [ 2113.066963][ T1936] ? reg_bounds_sanity_check+0x62a/0x1200 [ 2113.068753][ T1936] reg_set_min_max+0x183/0x2c0 [ 2113.070268][ T1936] check_cond_jmp_op+0x19b0/0x72d0 [ 2113.071906][ T1936] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 2113.073643][ T1936] ? push_jmp_history+0x294/0x790 [ 2113.075255][ T1936] do_check_common+0xa13e/0xb410 [ 2113.076841][ T1936] ? __pfx_do_check_common+0x10/0x10 [ 2113.078630][ T1936] ? local_clock_noinstr+0xb1/0xe0 [ 2113.080355][ T1936] ? kfree+0x2b4/0x4d0 [ 2113.081659][ T1936] ? bpf_check+0x7cf8/0xc4d0 [ 2113.083159][ T1936] bpf_check+0x8763/0xc4d0 [ 2113.084580][ T1936] ? __pfx_bpf_check+0x10/0x10 [ 2113.086123][ T1936] ? __lock_acquire+0xb97/0x1ce0 [ 2113.087694][ T1936] ? __asan_memset+0x23/0x50 [ 2113.089145][ T1936] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 2113.090738][ T1936] bpf_prog_load+0xe41/0x2490 [ 2113.092245][ T1936] ? __pfx_bpf_prog_load+0x10/0x10 [ 2113.093886][ T1936] __sys_bpf+0x4a3f/0x4de0 [ 2113.095294][ T1936] ? __pfx___sys_bpf+0x10/0x10 [ 2113.096805][ T1936] ? do_futex+0x122/0x350 [ 2113.098173][ T1936] ? __pfx_do_futex+0x10/0x10 [ 2113.099658][ T1936] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 2113.101535][ T1936] __ia32_sys_bpf+0x76/0xe0 [ 2113.102992][ T1936] __do_fast_syscall_32+0x7c/0x3a0 [ 2113.104595][ T1936] do_fast_syscall_32+0x32/0x80 [ 2113.106141][ T1936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2113.108108][ T1936] RIP: 0023:0xf7f51579 [ 2113.109561][ T1936] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2113.115700][ T1936] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2113.118290][ T1936] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 2113.121174][ T1936] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 2113.123645][ T1936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2113.126139][ T1936] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2113.128611][ T1936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2113.131218][ T1936] [ 2113.133108][ T1936] Kernel Offset: disabled [ 2113.134884][ T1936] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:32:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000000 RBX=0000000000000000 RCX=ffffffff913b6e01 RDX=0000000000000000 RSI=ffffffff8df411de RDI=ffffffff8c162f00 RBP=0000000000000001 RSP=ffffc9000355eff0 R8 =ffffffff913b6e86 R9 =0000000000000000 R10=0000000000000001 R11=0000000000002c68 R12=ffffffff816ab8a4 R13=0000000000000202 R14=ffff888023482440 R15=ffffc9000355f10c RIP=ffffffff8b9103ad RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f26e40 CR3=000000004c983000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73c4ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000006deed93 RBX=0000000000000001 RCX=ffffffff8b90fbf9 RDX=0000000000000000 RSI=ffffffff8de4dc69 RDI=ffffffff8c162f00 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90ab9290 R15=0000000000000000 RIP=ffffffff8b90e75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800001c0 CR3=000000005b121000 CR4=00352ef0 DR0=000000000000000a DR1=0000000000000002 DR2=0000000000000003 DR3=0000000080000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000003b5ecaf RBX=0000000000000002 RCX=ffffffff8b90fbf9 RDX=0000000000000000 RSI=ffffffff8de4dc69 RDI=ffffffff8c162f00 RBP=ffffed1003bdb910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801dedc880 R14=ffffffff90ab9290 R15=0000000000000000 RIP=ffffffff8b90e75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000566064c0 CR3=0000000053ef7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000029 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856179f5 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc90003fdec50 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000029 R14=ffffffff9b0fc6c0 R15=ffffffff85617990 RIP=ffffffff85617a1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7366a0c CR3=000000005b121000 CR4=00352ef0 DR0=000000000000000a DR1=0000000000000002 DR2=0000000000000003 DR3=0000000080000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000